Cyber-Fusion Analyst

Leidos; Shiloh (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

Leidos seeks a Cyber-Fusion Analyst to defend DoD and IC networks at the TS/SCI level. You will integrate cyber operations with intelligence workflows, producing actionable threat intelligence and guiding incident response for high-sensitivity missions.

The role requires active TS/SCI clearance, DoD 8570 IAT Level II certification, and deep knowledge of networks, security in classified environments, and multi-source analysis. Expect collaboration with IC partners and leadership briefings.

Qualifications

• Active Top-Secret clearance required.
• Current DoD 8570 IAT Level II baseline certification (Security+ CE or higher).
• Strong understanding of networks, OSI model, and security technologies in classified environments.
• Ability to produce clear intelligence reports and briefings for senior leadership.
• Experience collaborating with Intelligence Community partners and cyber teams.

Responsibilities

• Monitor and analyze global cyber threats targeting TS/SCI networks.
• Develop threat intel products including nation-state profiles and assessments.
• Provide real-time intel support during active incidents on classified networks.
• Disseminate intelligence through classified channels to DISA and partners.
• Contribute to IC collaboration and threat fusion efforts.
• Mentor teammates and develop new analytic methods for TS/SCI missions.

Skills

Threat intelligence

Incident response

intelligence analysis

Open-source intelligence

Communication to leadership

Education

Security+ CE or higher

Active TS/SCI clearance

Tools

ThreatConnect

Anomali

MISP

Malware analysis tools

Job description

Join the cyber-fusion team defending the nation\'s classified networks and Top-Secret mission systems. As a Cyber-Fusion Analyst, you\'ll operate at the intersection of cyber operations and intelligence, providing critical threat intelligence and incident response support to protect DoD, Intelligence Community, and Combatant Command networks at the highest classification levels.

Your Mission

• Classified Threat Intelligence Operations:
  Monitor and analyze the global cyber threat landscape using classified Intelligence Community reporting, DoD intelligence products, and open-source intelligence to identify threats targeting TS/SCI networks and mission systems
  Synthesize complex, multi-source intelligence into actionable products for senior leadership and operational teams defending classified infrastructure
• Develop comprehensive threat intelligence products including:
  Nation-state and APT threat profiles with classified attribution and capability assessments
  Monthly and quarterly intelligence assessments on threats to classified networks
  Strategic intelligence reports on adversary campaigns targeting sensitive DoD and IC systems
  Leverage classified intelligence sources to provide early warning of threats to Top Secret mission operations
• Operational Cyber Defense:
  Provide real-time threat intelligence support during active incidents on classified networks
  Support continuous threat hunting operations to proactively identify adversary presence in TS/SCI environments
  Conduct threat and vulnerability analysis specific to classified network architectures and mission systems
  Develop security advisories and tactical recommendations for protecting sensitive, compartmented information systems
  Disseminate time-sensitive threat intelligence to DISA, mission partners, and Intelligence Community stakeholders through classified channels
• Intelligence Community Collaboration:
  Serve as a liaison between cyber operations and Intelligence Community partners
  Participate in classified threat intelligence sharing initiatives and working groups
  Contribute to all-source intelligence fusion efforts combining SIGINT, HUMINT, and cyber threat data
  Apply advanced analytical frameworks (MITRE ATT&CK for ICS, Cyber Kill Chain, Diamond Model) to classified threat analysis
• Platform & Capability Development:
  Contribute to the development and enhancement of classified Threat Intelligence Platforms
  Identify patterns and anomalies in complex, multi-source datasets from classified networks
  Develop new analytical methods and intelligence products tailored to TS/SCI mission requirements
  Mentor team members and foster a collaborative intelligence-sharing culture

What You Bring

• Required Qualifications:
  Active Top-Secret clearance
  Current DoD 8570 IAT Level II baseline certification (Security+ CE or higher)
  Strong understanding of:
  Network protocols, operating systems, and the OSI model
  Security technologies deployed in classified environments
  Classified network architectures and security requirements
  Exceptional written and verbal communication skills, including:
  Ability to produce clear, concise intelligence reports and briefings for senior leadership
  Experience presenting complex threat information to diverse audiences including flag officers and SES-level officials
  Advanced analytical skills:
  Pattern recognition and anomaly detection in complex, multi-source datasets
  Logical reasoning and intelligence-driven analysis
  Critical thinking applied to ambiguous threat scenarios
  Experience gathering and analyzing intelligence from open-source, commercial, and classified sources
  Proven ability to collaborate effectively with Intelligence Community partners and joint cyber teams
• Highly Desired Qualifications:
  8+ years of experience in cyber threat intelligence analysis, threat hunting, or incident response within classified environments
  Experience working with Intelligence Community partners on threat intelligence sharing and fusion initiatives
  Hands-on experience with malware analysis tools and techniques (static and dynamic analysis)
  Proficiency with Threat Intelligence Platforms (ThreatConnect, Anomali, MISP, or similar)
  Deep knowledge of intelligence-driven frameworks:
  MITRE ATT&CK (Enterprise, ICS, Mobile)
  Cyber Kill Chain
  Diamond Model of Intrusion Analysis
  F3EAD targeting methodology
  Experience analyzing nation-state threat actors and Advanced Persistent Threats (APTs)
  Understanding of Intelligence Community Directives (ICDs) and intelligence oversight requirements
  Familiarity with SIGINT, HUMINT, or GEOINT integration with cyber threat intelligence
  Advanced certifications: GCTI, GCIA, GCFA, CISSP, or GIAC

Why This Role Matters

You\'ll be part of a team protecting the nation\'s most sensitive networks and mission-critical systems. Your intelligence analysis will directly support:
Combatant Command operations in contested cyber environments
Intelligence Community missions requiring the highest levels of security
National security decision-making