Continuous Monitoring Analyst

Via Logic LLC; Alexandria (VA); On-site; USD 58,000 - 105,000; Full time

Job summary

Leidos is seeking a ConMon Analyst to oversee security posture across IT systems lifecycle. The role requires a Top Secret clearance with SCI eligibility and on-site work in Alexandria, VA.

Responsibilities include assessing security changes, monitoring controls with Splunk/ACAS, and developing SOPs. Strong communication and RMF/NIST expertise are essential for success in this critical defense program.

Qualifications

• Bachelor's degree in an IT-related field and 4+ years of cybersecurity or network security experience.
• Active DoD Top Secret security clearance with SCI eligibility is required prior to start.
• Current DoD 8570 IAM II or IAT II certification.
• Strong experience with Splunk dashboards and security monitoring tools.
• Understanding of RMF, NIST SP 800-37/800-53, and CNSSI 1253.

Responsibilities

• Analyze proposed or actual system changes to determine security impact and assess controls.
• Use security tools (Axonius, Splunk, ACAS, Defender, HBSS/ESS) to monitor and validate controls.
• Develop and maintain ConMon Strategy and SOP for lifecycle oversight.
• Conduct continuous security assessments and generate status reports.

Skills

Security clearance

Communication skills

RMF knowledge

NIST SP 800-37

NIST SP 800-53

CNSSI 1253

Security architecture

Vulnerability management

Education

Bachelor's degree in IT-related field

Tools

Splunk

ACAS

HBSS/ESS

Axonius

Defender

Elastic

eMASS

Job description

Leidos is seeking a ConMon Analyst to be responsible for overseeing and monitoring authorized IT systems (re-authorization and new systems) throughout their lifecycle for security posture impact. This position is based out of Alexandria, VA and is primarily on-site. An active Top Secret security clearance (With SCI eligibility) is required prior to start and this role will be based onsite in the Alexandria, VA area.

Primary Responsibilities

• Analyze proposed or actual system changes to determine security impact, and assess security controls and their effectiveness.
• Utilize Axonius, Splunk, Assured Compliance Assessment Solution (ACAS), Microsoft Defender, and Host Based Security System (HBSS)/ESS to assess, validate, and monitor enterprise and system-level security controls in order to support on-going authorization.
• Develop and maintain the DISA RE5 ConMon Strategy and Standard Operating Procedures (SOP), outlining required activities and artifacts that include the oversight and monitoring of IT systems throughout their lifecycle.
• Conduct continuous assessments of security controls, perform automated/manual security control monitoring of information systems, and provide IS / Security Control Status Reports based on live data from security monitoring tools.
• Design efficient and reusable reports and dashboards to integrate multiple mission applications’ health, performance, and operational data systems.
• Create alerts that trigger on anomalous activities, threat detections, or configured settings to deploy notifications to particulate destination emails or groups.
• Ensure ConMon-related controls are properly implemented in RMF packages within eMASS and ensure ongoing assessments comply with industry auditor standards to monitor security, vulnerabilities, and threats.
• Maintain and expand upon the ConMon Dashboard, tracking compliance, POA&M status, CMRS visibility, asset management, FISMA reviews, and annual validations.
• Coordinate with System, ACAS, and HBSS/ESS Administrators to resolve credentialing and data issues.
• Provide real-time security status metrics based on the ConMon Strategy and SOP, and alert leadership of security posture changes with negative impact.

Basic Qualifications

• Bachelor's degree (IT-related field preferred) and 4+ years of prior relevant experience in a cybersecurity or network security position. Additional relevant experience may be considered in lieu of a degree.
• Active DoD Top Secret security clearance with SCI eligibility is required prior to start.
• Current DoD 8570 IAM II or IAT II certification.
• High-level understanding of Splunk with proven experience building and managing Splunk dashboards (Splunk Power User certification is not required).
• Understanding of the RMF process, NIST SP 800-37, NIST SP 800-53, and CNSSI 1253.
• Understanding of security architecture, system hardening, Vulnerability Management Programs (VMP), and intrusion detection/prevention.
• Excellent written, oral communication, and presentation skills; able to appropriately present highly technical material to both technical and non-technical audiences.

Preferred Qualifications

• Prior experience as a network intrusion analyst or Security Operations Center (SOC) analyst.
• Experience configuring and maintaining security tools in a multi-tenant environment.
• Experience with one or more of the following security tools:
  • MDE
  • ACAS
  • HBSS / ESS
  • Elastic
  • Axonius

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting

August 27, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $57,850.00 - $104,575.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

• competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave and Retirement

More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.