Cloud Security Team Lead

Leidos; Whitehall (OH); On-site; USD 107,900 - 195,050; Full time

Job summary

Leidos seeks a Cybersecurity Team Lead to direct a frontline team securing DoD multi-cloud and hybrid infrastructures across Columbus, OH; Scott AFB, IL; or Hill AFB, UT. You will mentor analysts, drive proactive threat monitoring, and coordinate incident response with senior leadership.

The role emphasizes leadership, DoD compliance, and certifications, with a stable five-day schedule and growth opportunities within a national defense mission.

Qualifications

• Active DoD Secret clearance with TS eligibility.
• DoD 8570 IAT Level II or higher certification.
• CSSP-A Level Certification within 180 days of hire.

Responsibilities

• Direct a frontline team of 6-8 cybersecurity analysts.
• Oversee threat monitoring and incident response coordination.
• Ensure alignment with DoD multi-cloud security across AWS, GCP, and Oracle.
• Escalate to customers and USCYBERCOM as needed.

Skills

Cybersecurity leadership

Threat monitoring

Incident response

Multi-cloud

Team mentoring

Education

Bachelor's degree

Tools

Splunk

Elastic

QRadar

Job description

Description

Leidos is seeking a Cybersecurity Team Lead to direct a front-line team securing DoD multi-cloud (AWS, GCP, Oracle) and hybrid infrastructures. This is your opportunity to lead cybersecurity where it matters most, driving mission success and 24x7 operational readiness on major defense programs with a national impact. This position can sit in any of our three core sites - Columbus, OH; Scott AFB, IL; or Hill AFB, UT.

Leidos is seeking a Cybersecurity Team Lead to direct a front-line team securing DoD multi-cloud (AWS, GCP, Oracle) and hybrid infrastructures. This is your opportunity to lead cybersecurity where it matters most, driving mission success and 24x7 operational readiness on major defense programs with a national impact. This position can sit in any of our three core sites - Columbus, OH; Scott AFB, IL; or Hill AFB, UT.

We value our leaders as much as our mission. Built for experienced, people-first managers, this role empowers you to mentor emerging technical talent, direct advanced alert triage, and influence operational strategy with senior leadership. We support your career growth with structured training and professional development pathways, all while prioritizing your work-life balance through a stable, standard five-day, 8-hour shift schedule.

Primary Responsibilities

• Cyber Defense Operations: Direct a specialized team of 6-8 cybersecurity analysts, providing guidance and oversight across the following critical tasks:
  • Proactive Threat Monitoring: Drive the analysis and correlation of real-time DoD and open-source intelligence feeds. Guide your team in actively integrating threat intelligence (IOCs) into security sensors and enterprise SIEMs to intercept emerging threats.
  • Advanced Alert Triage: Oversee the investigation of security alerts across complex networks. Lead your analysts in leveraging endpoint telemetry, IDS/IPS, NetFlow, VPC Flows, and raw packet data to rapidly detect and report suspicious actors.
  • Multi-Cloud Correlation: Direct the analysis of extensive log files and security events across diverse, enterprise-scale multi-cloud environments (AWS, GCP, Oracle) to identify and prioritize suspicious behavior.
  • Incident Response Coordination: Partner with incident response teams and act as the key escalation point for customers and USCYBERCOM.
  • High-Impact Escalation & Reporting: Author thorough investigation reports detailing incident findings. Serve as the critical escalation point to customers and USCYBERCOM, ensuring a unified and timely response to critical security events.
• People-First Leadership: Act as a core mentor and strategic leader for your Team by focusing on the following
  • Cultivate Cyber Talent: Champion a positive, highly productive work culture through consistent employee engagement. Actively support your team's professional growth by partnering with senior leadership to manage ongoing training, performance reviews, and career advancement pathways.
  • Strategic Communication: Serve as the operational bridge between your analysts and the broader mission. Maintain transparent, highly effective communication across the chain of command, civilian personnel, and external customers to ensure daily operational success.
  • Drive Mission Effectiveness: Collaborate with senior leadership to clear operational roadblocks and align your team’s daily activities with long-term strategic goals. Ensure organizational policies and leadership directives are implemented smoothly and consistently.

Basic Qualifications

• Clearance & Certifications
• Security Clearance: Minimum active DoD Secret clearance, with eligibility to obtain a Top Secret (TS) clearance.
• Baseline Certification: Current DoD 8570 IAT Level II certification or higher (e.g., CompTIA Security+ CE, ISC2 SSCP, SANS GSEC, or equivalent).
• Specialty Certification: Ability to obtain a DoD 8570 CSSP-A Level Certification (e.g., CEH, CySA+, GCIA, or equivalent) within 180 days of hire.

Leadership & Professional Experience

• Leadership Background: A minimum of 2 years of formal management or equivalent team leadership experience.
• Education & Experience Levels: Bachelor's degree in a related discipline as well as 8+ years of directly relevant experience. Military service and equivalent professional work experience are highly valued and may be considered in lieu of a degree.

Technical Foundation & Core Attributes

• Network Security Expertise: Strong understanding of network traffic flow, packet analysis, ports, protocols, and defense-in-depth security.
• Strategic Problem Solving: Proven ability to collaborate effectively with cross-functional teams to tackle complex security challenges. Must be able to translate deep technical data into concise communications, build consensus, and drive incident solutions to completion.
• Professional Agility: Highly reliable and flexible, demonstrating a strong work ethic whether working independently or leading collaborative team efforts on assigned shifts.
• Continuous Improvement: Passionate about staying ahead of emerging threats, demonstrated through the ongoing pursuit of certifications, self-study, or active participation in cybersecurity forums.
• Location: Within a 2-hour commute (or willing to relocate) to Hill AFB, UT; Scott AFB, IL; or Columbus, OH.

PREFERRED QUALIFICATIONS (Stand-Out Candidates)

• DoD Ecosystem Experience: Prior experience working with DISA and/or DoD networks.
• Advanced Leadership: 2+ years specifically managing cross-functional cybersecurity or SOC teams.
• Enterprise SIEM Mastery: Operational mastery of enterprise-grade SIEM platforms (e.g., Splunk, Elastic, QRadar).
• Advanced Certifications: CCSP, CCSK, Cloud+, SANS GIAC (GCIA, GCIH, GLSC) or CompTIA CASP+.

If you\'re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We\'re not hiring followers. We\'re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We\'re already at step 30 — and moving faster than anyone else dares.

Note: This description is for a U.S. position. Details may change based on business needs.

Pay Range $107,900.00 - $195,050.00

Qualifying statements and benefits are available at www.leidos.com/careers/pay-benefits.

Be aware of potential job scams. Leidos will never ask you to provide payment-related information during the employment application process, nor will Leidos advance money as part of the hiring process. If you suspect a scam, contact your local law enforcement and report to the U.S. Federal Trade Commission.

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.