Cyber Defense Analyst, 24/7 SOC & Incident Response

Leidos LLC; Adelphi (MD); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch (DCSB) and help protect DoD networks, systems, and data from sophisticated cyber threats. You’ll join a high-visibility SOC providing 24x7 operations across on-prem and cloud platforms.

The role requires incident response leadership, SIEM tuning, and log analysis. Ideal candidates have 4–8 years’ cybersecurity experience, a TS/SCI with SAP eligibility, Security+ CE, and CSSP‑Infrastructure

Qualifications

• Bachelor's degree in cybersecurity or related field.
• Hands-on experience with SIEM and security monitoring.
• Experience analyzing security logs, NetFlow, and packet captures.

Responsibilities

• Lead and coordinate investigations throughout the Incident Response lifecycle.
• Correlate and analyze security events, logs, and network data.
• Acquire and analyze endpoint/network artifacts to identify activity.
• Identify attacker TTPs and IOCs to strengthen detection and response.
• Tune and maintain SIEM/IDS to reduce false positives.
• Develop and maintain IR processes, workflows, and playbooks.
• Document investigations and prepare actionable incident reports.
• Collaborate with cyber professionals to defend the DoDIN against threats.

Skills

SIEM

NetFlow analysis

Packet capture analysis

TCP/IP understanding

Cloud security concepts

Unix-based systems

Team collaboration

Education

Bachelor's degree in cybersecurity or related field

Tools

SIEM

IDS/IPS

Job description

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch (DCSB) and help protect DoD networks, systems, and data from sophisticated cyber threats. You’ll join a high-visibility SOC providing 24x7 operations across on-prem and cloud platforms.

The role requires incident response leadership, SIEM tuning, and log analysis. Ideal candidates have 4–8 years’ cybersecurity experience, a TS/SCI with SAP eligibility, Security+ CE, and CSSP‑Infrastructure