Cyber Defense Analyst | TS/SCI • Hybrid SOC (10pm–6am)

COMFORT SYSTEMS; Adelphi (MD); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch (DCSB) and protect DoD networks, systems, and data from cyber threats. Hybrid work arrangement: 3 days on site at Adelphi, MD with a mid-shift schedule (10:00 pm–6:00 am).

Responsibilities include leading investigations, correlating security events, analyzing logs, and maintaining SIEM/IDS. Requires TS/SCI clearance, Security+ CE, and CSSP- Infrastructure Support certification.

Qualifications

• Bachelor's degree and 4-8 years of relevant cybersecurity experience.
• Hands-on experience with an enterprise SIEM platform.
• Experience analyzing high volumes of security logs and network data, including NetFlow and full packet capture.
• Experience with network traffic and packet analysis.
• Understanding of TCP/IP, OSI model, cloud security concepts.
• U.S. citizenship with an active TS/SCI clearance.

Responsibilities

• Lead and coordinate investigations throughout the Incident Response lifecycle, from detection through remediation.
• Correlate and analyze security events, alerts, logs, and network data to determine incident scope and impact.
• Acquire and analyze endpoint and network artifacts to identify malicious activity.
• Identify attacker techniques and indicators of compromise to strengthen detection and response.
• Tune and maintain SIEM and IDS to reduce false positives and improve detection.
• Develop and maintain Incident Response processes, procedures, workflows, and playbooks.
• Document investigations and response actions in case management systems and prepare actionable incident reports.
• Collaborate with cyber professionals to defend the DoDIN against threats and APTs.

Skills

Incident Response

SIEM

Threat analysis

Network forensics

DoDIN

Education

Bachelor's degree in cybersecurity

Tools

SIEM

IDS

Job description

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch (DCSB) and protect DoD networks, systems, and data from cyber threats. Hybrid work arrangement: 3 days on site at Adelphi, MD with a mid-shift schedule (10:00 pm–6:00 am).

Responsibilities include leading investigations, correlating security events, analyzing logs, and maintaining SIEM/IDS. Requires TS/SCI clearance, Security+ CE, and CSSP- Infrastructure Support certification.