Cyber Fusion Analyst — Threat Intel & Incident Response

Leidos LLC; Fort Meade (MD); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos Defense Group is seeking a Cyber Security Fusion Analyst for the GSM-O II program at Fort Meade. You will provide incident handling, event triage, network analysis, threat detection, and vulnerability information dissemination to support DISA GSM-O II and Joint Force HQ DODIN.

The role involves leveraging network monitoring, IDS, and PCAP data, developing SOPs, and providing risk assessments with mitigation strategies to reduce the enterprise attack surface.

Qualifications

• Active DoD TS/SCI clearance required or eligible for polygraph.
• Bachelor’s degree in a related discipline with 12+ years of related experience; additional experience may substitute for degree.
• Security+ or equivalent DoD 8570 Level II certification.

Responsibilities

• Use network monitoring and detection tools (netflow, logs, IDS, PCAP) to identify cyber adversary activity.
• Assist in developing Cyber Fusion SOPs and Frameworks per DoD guidance.
• Identify threats and provide mitigations to reduce attack surface.
• Analyze threat reports, OSINT, and vulnerability information to prioritize plans.
• Document malicious actor TTPs and map to enterprise vulnerabilities and environments.
• Detect adversary campaigns and anomalies in sensor logs and SIEMs.
• Investigate and rule out system compromises with written summaries and visualizations of attack lifecycles.
• Provide risk assessments and actionable recommendations based on threat data.
• Suggest enterprise or tactical countermeasures to address threats to the DODIN.
• Collect metrics and trends to provide situational awareness.

Skills

TS/SCI clearance

Network protocols

Vulnerability analysis

Threat intelligence

Education

Bachelor’s degree

Tools

Wireshark

Splunk

Arcsight

VirusTotal

Job description

Leidos Defense Group is seeking a Cyber Security Fusion Analyst for the GSM-O II program at Fort Meade. You will provide incident handling, event triage, network analysis, threat detection, and vulnerability information dissemination to support DISA GSM-O II and Joint Force HQ DODIN.

The role involves leveraging network monitoring, IDS, and PCAP data, developing SOPs, and providing risk assessments with mitigation strategies to reduce the enterprise attack surface.