Cyber Threat Intelligence Analyst — Pacific DoD Defense

Leidos; Waipahu (HI); In loco; USD 87.000 - 157.000; Tempo pieno

Descrizione del lavoro

Leidos is seeking an experienced Cyber Threat Analyst to join our Defensive Cyber Operations (DCO) team supporting DISA PAC at Ford Island, HI. You will synthesize multi-source intel, analyze TTPs, and track campaigns across boundaries to guide threat-informed defense operations in multi-cloud and classified networks.

Required DoD 8140-based qualifications and Top Secret/SCI eligibility. Bachelor’s degree with 4+ years or equivalent experience, and active U.S. citizenship.

Competenze

• Bachelor’s degree with 4+ years of relevant experience; OR an Associate degree with 6+ years; OR 8+ years of relevant experience / military service in lieu of a degree.
• Must hold a valid certification or degree compliant with DoD 8140.03 / DCWF Work Role Code 531: Cyber Defense Incident Responder or equivalent (Intermediate proficiency level) prior to start date.
• Accepted Certifications include: CompTIA CySA+, GCTI (GIAC Cyber Threat Intelligence), CEH, CFR, GCIA, GCIH, CND, or advanced credentials such as CISSP, CASP+ CE, or GCFA.
• Privileged Access (SA/SSP) eligibility: Willingness to obtain and maintain system access credentials as required by operational mission requirements.

Mansioni

• Boundary Threat Analysis & Adversary Characterization:Analyze boundary sensor feeds, Netflow, and IDS/IPS logs to deliver Warning Intelligence and Attack Sensing.
• Adversary Campaign Tracking: Apply MITRE ATT&CK and Cyber Kill Chain to track campaigns and LotL tradecraft.
• Actionable Battlefield Intelligence: Author, refine, and disseminate Threat Warnings and Tippers for tactical defenders.
• Automated Telemetry & Breach Assessment: Evaluate telemetry from blocking platforms to uncover evasion techniques.
• Operational Reporting & DJOC Synchronization: Coordinate with DJOC, USPACOM J6, DCDC, USCYBERCOM, and NSA for incident reporting.
• Enterprise CSSP Intelligence & Proactive Threat Hunting: Develop threat hypotheses and conduct structured threat-hunting across endpoints and cloud enclaves.
• Multi-Cloud & Zero Trust Threat Analysis: Track threats in AWS GovCloud, Azure Gov, GCP, OCI with ZTNA and Defender suites.
• Analytic Capability & Use Case Development: Translate threat intel into detection use cases for SIEM ingestion.

Conoscenze

MITRE ATT&CK framework

Threat hunting

Threat intelligence

Boundary/perimeter threat analysis

Netflow/IDS/IPS analysis

SIEM (Splunk, Elastic, MS Sentinel)

Formazione

Bachelor’s degree + 4+ years

Associate degree + 6+ years

8+ years military service in lieu of a degree

Strumenti

Splunk

Microsoft Sentinel

Elastic / Kibana

JCRS-D

MISP

ThreatConnect

Anomali

VirusTotal

Shodan

Descrizione del lavoro

Leidos is seeking an experienced Cyber Threat Analyst to join our Defensive Cyber Operations (DCO) team supporting DISA PAC at Ford Island, HI. You will synthesize multi-source intel, analyze TTPs, and track campaigns across boundaries to guide threat-informed defense operations in multi-cloud and classified networks.

Required DoD 8140-based qualifications and Top Secret/SCI eligibility. Bachelor’s degree with 4+ years or equivalent experience, and active U.S. citizenship.