Cyber Analyst: Threat Intel, SOC Tuning & Forensics

Leidos LLC; White Wolf Bridge (OK); On-site; USD 90,000 - 157,000; Full time

Benefits offered by this job

Paid Time Off

11 paid Holidays

401K with match

Flexible schedules

Education and training support

Parental paid leave

Job summary

Leidos LLC in Lawton, OK is seeking a Mid-Level Cyber Analyst to support national security efforts, focusing on threat intelligence integration, detection engineering, and coordination with software engineering to improve alarm accuracy.

The role requires a Bachelor's degree in cybersecurity or related field with 4+ years in cyber security and SOC operations, plus strong Linux and networking skills. Eligibility for TS/SCI clearance is required.

Qualifications

• Bachelor's Degree in cybersecurity or related field, or equivalent experience.
• Minimum 4+ years in Cyber Security.
• Minimum 2+ years as a SOC operator.
• Intermediate to expert Linux knowledge.
• Strong networking knowledge and tools (e.g., Wireshark).
• Knowledge of host-based forensics and telemetry artifacts.
• Ability to write testing scripts.
• US citizenship and ability to obtain TS/SCI clearance.

Responsibilities

• Perform Threat Intelligence integration and reporting on detection gaps.
• Detection Engineering & Tuning—analyzing FP/FN and providing feedback to developers.
• Bridge the gap between defensive operations and software engineering with training sessions and walkthroughs.
• Participate in sprint planning and product roadmap discussions to ensure operator perspective in software requirements.
• Provide input on UI/UX for analyst efficiency and reduce cognitive load during high-stress alerts.

Skills

Threat Intelligence

Detection Engineering

SOC Operations

Linux Proficiency

Education

Bachelor's Degree in cybersecurity or similar

Tools

Wireshark

Linux

Job description

Leidos LLC in Lawton, OK is seeking a Mid-Level Cyber Analyst to support national security efforts, focusing on threat intelligence integration, detection engineering, and coordination with software engineering to improve alarm accuracy.

The role requires a Bachelor's degree in cybersecurity or related field with 4+ years in cyber security and SOC operations, plus strong Linux and networking skills. Eligibility for TS/SCI clearance is required.