Cybersecurity Analyst

Leidos; Shiloh (IL); On-site; USD 70,000 - 126,000; Full time

Benefits offered by this job

Health and Wellness

Income Protection

Paid Leave

Retirement benefits

Job summary

Leidos is seeking a Cyber Security Analyst to defend DoD networks as part of a 24×7 security operations team. You will analyze real-time threat intelligence, correlate events, and collaborate with incident response to contain threats, ensuring rapid containment and eradication.

The role requires clearance, DoD 8570 IAT Level II certification, and the ability to obtain CSSP-A. Flexible shift opportunities and commutable distance to Scott AFB, IL are provided.

Qualifications

• Bachelor's degree required with relevant experience as described in levels I/II.
• Strong networking foundation including packet analysis and OSI model.
• Experience with security monitoring, incident response coordination, and reporting.

Responsibilities

• Investigate alerts from endpoints, IDS/IPS, NetFlow, and sensors to detect compromises.
• Analyze large log sets, correlate data, and produce detailed technical investigations.

Skills

Networking basics

Packet analysis

Security fundamentals

Incident response coordination

Education

Bachelor's degree

Tools

SIEM/SOAR

NetFlow/PCAP tools

Cloud security tools

Job description

Leidos Digital Modernization sector seeks talented and cleared Cyber Security Analysts to support the DISA GSM-O II program. The role is part of a 24×7 security operations team, defending DoD networks from evolving cyber threats.

About the Role

As a Cyber Security Analyst, you will defend Department of Defense networks from evolving cyber threats. You will be a key member of our 24×7 security operations team, responsible for analyzing real‑time cyber threat intelligence, correlating security events, conducting in-depth network traffic analysis, and collaborating with incident response teams to contain and eradicate threats.

Shift Opportunities

Flexible shift options: 7:00 AM – 3:00 PM, 3:00 PM – 11:00 PM, and 11:00 PM – 7:00 AM. Shift assignments are based on program requirements and your preference, with some flexibility required.

Locations

Scott AFB, IL.

Primary Responsibilities

• Investigate alerts from endpoints, IDS/IPS, NetFlow data, and custom sensors to detect compromises.
• Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations, producing detailed technical reports.
• Triage security alerts to rapidly identify malicious actors targeting customer networks.
• Monitor and analyze DoD and open‑source intelligence feeds to identify Indicators of Compromise (IOCs) and integrate them into security sensors and SIEMs.
• Report security incidents to customers and USCYBERCOM, ensuring timely communication and coordinated response.
• Analyze real‑time cyber threat intelligence to stay ahead of emerging threats.
• Conduct in‑depth network traffic analysis using raw packet data to uncover malicious activity.
• Collaborate with incident response teams to contain and eradicate threats.

Required Qualifications

• Minimum active DoD Secret clearance with the ability to obtain TS/SCI.
• Current DoD 8570 IAT Level II certification (or higher), such as CompTIA Security+ CE, ISC2 SSCP, or SANS GSEC.
• Ability to obtain DoD 8570 CSSP-A Level Certification (e.g., CEH, CySA+, GCIA) within 180 days of hire.
• Strong foundation in networking, including packet analysis, common ports and protocols, traffic flow, OSI model, and defense‑in‑depth security principles.
• Education and experience: Level I – Bachelor's degree and 1+ years of relevant experience (or equivalent work experience/military service); Level II – Bachelor's degree and 3+ years of relevant experience (or equivalent).
• Proven ability to work effectively independently and as a collaborative team member.
• Committed to continuous learning and self‑improvement, evidenced by pursuing certifications and participating in industry forums.
• Excellent problem‑solving skills and ability to communicate technical information clearly and concisely.
• Reliable and flexible, with a demonstrated willingness to work assigned shifts.
• Located within a commutable distance (within 2 hours) of Scott AFB, IL, or able to self‑relocate.

Preferred Qualifications

• Hands‑on experience analyzing large volumes of logs, network data (NetFlow, Full Packet Capture), and other attack artifacts during incident investigations.
• In‑depth experience with SIEM/SOAR platforms to analyze multiple log types and events, applying behavioral analysis, statistical analysis, and machine learning to detect and respond to advanced threats.
• Comprehensive understanding of the network threat lifecycle, attack vectors, and tactics, techniques, and procedures (TTPs).
• Experience with Anti‑Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, and Network Forensics tools.
• Experience monitoring, defending, or administering cloud networks (AWS, Azure, GCP) and cloud‑native security tools, including mitigating cloud‑specific attacks.
• Experience managing, defending, administering, or deploying mobile devices (iOS, Android) for enterprise, including MDM, MAM, and MTD.
• Scripting and programming skills.

Pay Range

$69,550.00 - $125,725.00

Pay And Benefits

Competitive compensation, Health and Wellness programs, Income Protection, Paid Leave, and Retirement.

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.