DoD 24x7 Cyber Defense Mission Lead

Via Logic LLC; Shiloh (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos in the United States is seeking a TS Mission Lead to guide an operational team delivering 24x7 defensive cybersecurity monitoring and incident operations across DoD networks.

The role is on-site with a core 5x8 day shift to ensure continuous coverage and rapid recall capability. You will coach analysts, coordinate incident response, and align activities with program leadership while operating within a SCIF near Hill AFB, UT, Scott AFB, IL, or Columbus, OH.

Qualifications

• Active DoD Top Secret/SCI clearance is required.
• Current DoD 8570/8150 IAT Level II baseline cert (e.g., Security+ CE, SSCP, GSEC).
• CSSP-A or CSSP-IR cert or ability to obtain within 180 days of hire.
• Strong OSI model knowledge and defense‑in‑depth concepts.

Responsibilities

• Lead analysts in evaluating alerts from endpoints, IDS/IPS, NetFlow, and sensors across classified enclaves.
• Produce detailed Cyber Incident Reports (CIR) and integrate threat feeds with SIEMs.
• Coordinate containment actions and elevate critical incidents to leadership per DoD standards.
• Mentor team members, manage shift coverage, and ensure mission readiness within the SCIF.

Skills

TCP/IP networking

Packet analysis

MITRE ATT&CK

Cyber incident handling

Education

Level III: Bachelor's + 4 years

Level IV: Bachelor's + 8 years

Tools

Splunk

Elastic

Microsoft Sentinel

Job description

Leidos in the United States is seeking a TS Mission Lead to guide an operational team delivering 24x7 defensive cybersecurity monitoring and incident operations across DoD networks.

The role is on-site with a core 5x8 day shift to ensure continuous coverage and rapid recall capability. You will coach analysts, coordinate incident response, and align activities with program leadership while operating within a SCIF near Hill AFB, UT, Scott AFB, IL, or Columbus, OH.