Defensive Cybersecurity Analyst - Leidos

OpenTalent; Whitehall (OH); On-site; USD 70,000 - 100,000; Full time

Job summary

OpenTalent is seeking proactive Security Operations Center (SOC) analysts to defend DoD networks in a 24x7 front-line security operations team. You will triage alerts, analyze logs, and correlate data across SIEM platforms to support incident investigations for DoD environments.

Ideal candidates demonstrate critical thinking, self-motivation for professional growth, and adaptability to evolving threats and security tools, while coordinating with incident response teams and customers including

Qualifications

• SOC experience in 24x7 operations
• Critical thinking and adversary mindset
• Self-motivated with ongoing professional development
• Adaptability to changing threat landscape and tools

Responsibilities

• Investigate and triage security alerts from endpoints, IDS/IPS, NetFlow, and custom sensors.
• Analyze log files, pivot between datasets, and correlate evidence for incident investigations.
• Monitor and integrate DoD threat feeds and IOCs into sensors and SIEM platforms.
• Collaborate with incident response teams and communicate incidents to customers and USCYBERCOM.

Job description

Description

We are seeking proactive defenders who bring Security Operations Center (SOC) experience, exceptional critical thinking skills, and a self-motivated approach to safeguarding infrastructure as Cyber Security Analysts in our 24x7 front-line security operations team. In this role, you will be directly responsible for defending Department of Defense (DoD) networks against sophisticated, rapidly evolving cyber threats.

Primary Responsibilities

• Investigate and triage security alerts generated from endpoints, IDS/IPS, NetFlow data, and custom sensors to identify suspicious activity.
• Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations, producing detailed technical findings and reports.
• Monitor and integrate DoD and open-source threat intelligence feeds and Indicators of Compromise (IOCs) into security sensors and SIEM platforms.
• Collaborate closely with incident response teams and ensure timely, clear communication of security incidents to customers and USCYBERCOM.

Key Skillsets We Are Looking For

• SOC Experience: You understand the operational flow, high tempo demands, and rigorous standards of a 24x7 Security Operations Center. You are comfortable executing structured incident triage and escalation protocols.
• Critical Thinking & Adversary Mindset : You possess the ability to look beyond the surface of an alert. You excel at correlating disparate data points, analyzing raw packet data, and conducting deep-dive investigation of complex security events to uncover sophisticated malicious activity.
• Demonstrated Self-Motivation: You are a self-starter who takes active ownership of your professional development. Whether pursuing advanced certifications, researching emerging threat vectors, or mastering new tools, you drive your own growth.
• Thrives on Change: The threat landscape and tactical priorities shift constantly. You demonstrate high operational adaptability, viewing unexpected shifts as opportunities to excel, and seamlessly pivot to adopt new processes, security tools, and analytical methodologies to counter evolving adversaries or challenges.

Shift & Operational Requirements

• Predictable Work-Life Balance: To support your well-being, we utilize a predictable five-day, 8-hour shift structure.
• Day Shift: 8:00 AM - 4:00 PM
• Swing Shift: 4:00 PM - 12:00 AM
• Mid Shift: 12:00 AM - 8:00 AM
• Flexibility: We highly value your work-life balance and make every effort to honor your shift preferences whenever possible. While final assignments must ensure critical program requirements are met, we strive to manage scheduling with a balanced approach that respects our team members' personal needs alongside mission readiness.