Cyber Mission Lead - DoD 24x7 Defense

Leidos; Clearfield (UT); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos seeks a TS Mission Lead to guide an operational team delivering 24x7 defensive cybersecurity monitoring and incident operations across DoD Top Secret networks. The role is on-site with a 5x8 day shift and recall readiness at Hill AFB, UT.

You will mentor staff, coordinate incident response, and integrate threat intelligence with SIEMs, MITRE ATT&CK, and Cyber Kill Chain frameworks, ensuring mission alignment and continuous improvement.

Qualifications

• Active DoD Top Secret/SCI clearance.
• DoD 8570/8140 IAT Level II baseline cert (e.g., Security+ CE, SSCP, GSEC, CySA+).
• CSSP-A or CSSP-IR cert, or ability to obtain within 180 days of hire.
• Strong TCP/IP networking and packet analysis skills (Wireshark/tcpdump).
• Bachelor’s degree + 4–8 years of relevant cyber defense/SOC experience (Level III/IV).
• On-site 5x8 schedule with 2-hour recall commute to Hill AFB, UT; Scott AFB, IL; or Columbus, OH.

Responsibilities

• Lead analysts in evaluating alerts across classified enclaves to identify and mitigate malicious activity.
• Produce CIRs and integrate threat feeds into SIEMs; align with MITRE ATT&CK and Kill Chain.
• Direct incident response coordination and escalation to leadership and customer stakeholders.

Skills

Leadership

Team mentoring

Incident response coordination

Communication

Problem solving

Education

Bachelor's degree

Tools

Splunk

Elastic

Sentinel

Job description

Leidos seeks a TS Mission Lead to guide an operational team delivering 24x7 defensive cybersecurity monitoring and incident operations across DoD Top Secret networks. The role is on-site with a 5x8 day shift and recall readiness at Hill AFB, UT.

You will mentor staff, coordinate incident response, and integrate threat intelligence with SIEMs, MITRE ATT&CK, and Cyber Kill Chain frameworks, ensuring mission alignment and continuous improvement.