Cyber Intelligence Fusion Analyst: Threat-Hunting SOC Lead

00100 LEIDOS, INC.; Alexandria (VA); Presencial; USD 108.000 - 195.000; Jornada completa

Descripción de la vacante

Leidos is seeking a Cyber Intelligence Fusion Analyst to support the J361 SOC at the Mark Center in Alexandria, VA. This 100% onsite role emphasizes threat hunting, threat intelligence integration, and analytic tradecraft to protect tenants and mission operations.

The candidate will ingest OSINT, map MITRE ATT&CK techniques, develop detections, and brief leadership. A TS clearance, 8+ years in cybersecurity, and hands-on SIEM/EDR experience are required.

Formación

• Bachelor’s degree and 8+ years in cybersecurity, ops, or intel.
• Active Top Secret clearance; DoD 8140 IAT/CSSP baseline expectations.
• Hands-on threat hunts, detections, and incident response.
• Experience applying MITRE ATT&CK or Cyber Kill Chain models.
• Proficiency with SIEM/EDR tools and enterprise telemetry.

Responsabilidades

• Ingest and analyze threat reporting from OSINT, gov, and commercial sources.
• Conduct proactive threat hunts and develop detection logic and queries.
• Correlate external intel with SIEM/EDR telemetry to identify adversary activity.
• Develop hunt plans, adversary profiles, and AARs; brief leadership.
• Produce threat reports and briefings for senior leadership and mission partners.

Conocimientos

Threat hunting

Threat intelligence

Incident response

MITRE ATT&CK

EDR telemetry

Educación

Bachelor's degree in cybersecurity

Herramientas

Splunk

Elastic

Microsoft Defender for Endpoint

Microsoft Sentinel

Wireshark

PCAP

NetFlow

Descripción del empleo

Leidos is seeking a Cyber Intelligence Fusion Analyst to support the J361 SOC at the Mark Center in Alexandria, VA. This 100% onsite role emphasizes threat hunting, threat intelligence integration, and analytic tradecraft to protect tenants and mission operations.

The candidate will ingest OSINT, map MITRE ATT&CK techniques, develop detections, and brief leadership. A TS clearance, 8+ years in cybersecurity, and hands-on SIEM/EDR experience are required.