Cyber Threat Intel & Fusion Analyst | Hybrid Role

Leidos Inc; Washington (District of Columbia); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking Cyber Analysts for the Defensive Cyber Operations team in Washington, DC, with hybrid work up to 20% telework. Roles support protecting federal networks against threats to national security and operate on 24/7 rotating shifts with core hours 0600-1600.

Responsibilities span threat hunting, threat intelligence, and cyber fusion. Candidates should hold DoD TS/SCI clearance and meet DoD 8570 certifications; strong networking knowledge and experience with MITRE ATT&CK are valued.

Qualifications

• Current DoD TS/SCI clearance and ability to pass additional screening.
• Level III: Bachelor’s degree and 4+ years (or Master’s and 2+); level IV: 8+ years (or Master’s and 6+)
• DoD 8570 IAT Level II or higher required to start
• DoD 8570 CSSP Analyst cert required within 180 days of onboarding
• DoD 8570 CSSP Infrastructure Support cert required within 180 days of onboarding
• Strong knowledge of networking protocols (TCP/IP, DNS, HTTP/S) and security controls (IDS/IPS, NGFW)

Responsibilities

• Threat Hunting: develop and execute hunt campaigns based on adversary TTPs
• Threat Intelligence: produce strategic, operational, and tactical intel reports on threats and actor motivations
• Cyber Fusion: synthesize external threat intel with internal hunt telemetry into a unified picture
• Shared across tracks: maintain situational awareness and collaborate across Hunt, Intel, and Fusion teams

Skills

Threat Hunting

Threat Intelligence

Cyber Fusion

Analytical Writing

Collaboration

Education

Bachelor's degree in a related discipline

Master's degree in a related discipline

Tools

Splunk SPL

KQL

Elastic DSL

MITRE ATT&CK

Anomali

ThreatConnect

MISP

Job description

Leidos is seeking Cyber Analysts for the Defensive Cyber Operations team in Washington, DC, with hybrid work up to 20% telework. Roles support protecting federal networks against threats to national security and operate on 24/7 rotating shifts with core hours 0600-1600.

Responsibilities span threat hunting, threat intelligence, and cyber fusion. Candidates should hold DoD TS/SCI clearance and meet DoD 8570 certifications; strong networking knowledge and experience with MITRE ATT&CK are valued.