Cyber Defense Network Analyst — TS/SCI (On-Site)

Leidos; Arlington (VA); On-site; USD 70,000 - 126,000; Full time

Job summary

Leidos, based in Reston, Virginia, is seeking a Cyber Network Defense Analyst to join the CESO effort in Arlington. This on-site role requires an active TS/SCI clearance to protect networked systems during a secure cloud migration and ongoing 24x7 operations.

You will monitor alerts, document analyses, coordinate with IT teams, and help shape CESO processes while maintaining strong customer relationships and ensuring rapid incident response.

Qualifications

• Bachelor's degree with 2+ years of related experience; more experience may substitute for degree.
• Active TS/SCI clearance required to begin work.
• DoDD 8140 IAT Level II (or Level III) certification (e.g., Security+ CE).
• Strong computing systems knowledge across Windows, Linux, cloud and networking.
• Experience implementing security settings per vendor and DISA best practices.
• CI Polygraph may be required in the future.

Responsibilities

• Perform network incident detection and response to identify threats to CESO.
• Monitor security tools, investigate alerts, and propose mitigation actions.
• Document events and analysis clearly in the ticketing system for action.
• Maintain regular customer interaction and address issues with minimal supervision.
• Influence CESO processes to improve team performance and procedures.
• Ensure timely system checks and complete, accurate documentation.
• Assist senior analysts with forecasting and modeling current threats.
• Build rapport with the customer and act as a trusted network defense analyst.
• Collaborate with infrastructure, storage, database and application teams to align monitoring with cloud migrations.

Skills

Windows

Red Hat

Cloud (AWS/Azure)

Networking

IDS/IPS

Firewalls

Security+ CE

Education

Bachelor's degree

Tools

Splunk

Elastic

Job description

Leidos, based in Reston, Virginia, is seeking a Cyber Network Defense Analyst to join the CESO effort in Arlington. This on-site role requires an active TS/SCI clearance to protect networked systems during a secure cloud migration and ongoing 24x7 operations.

You will monitor alerts, document analyses, coordinate with IT teams, and help shape CESO processes while maintaining strong customer relationships and ensuring rapid incident response.