DoD Cyber Defense Analyst (TS/SCI, 24x7 SOC)

Leidos; Fort Belvoir (VA); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave

Retirement

Job summary

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch at Fort Belvoir, VA. You will join a 24x7 SOC delivering threat detection, incident response, and vulnerability management to protect DoD networks.

Responsibilities include leading investigations, analyzing events, and developing incident response playbooks while collaborating with a fast-paced team. TS/SCI with SAP eligibility required.

Qualifications

• Bachelor's degree with 4-8 years of cybersecurity experience.
• Hands-on SIEM experience.
• Experience analyzing security logs and NetFlow/packet capture.
• Knowledge of TCP/IP, OSI model, and network security concepts.
• U.S. citizenship with an active TS/SCI clearance with SAP eligibility.
• Familiarity with Unix-based systems.
• Ability to work in a 24x7 SOC environment.

Responsibilities

• Lead and coordinate investigations through the Incident Response lifecycle from detection to remediation.
• Correlate and analyze security events, alerts, and network data to determine scope and impact.
• Acquire and analyze endpoint/network artifacts to identify malicious activity.
• Identify attacker TTPs and IOCs to strengthen detection and response capabilities.
• Tune and maintain SIEM/IDS to reduce false positives and improve SOC detection.
• Develop and maintain Incident Response processes, workflows, and playbooks.
• Document investigations in case management systems and prepare actionable reports.
• Collaborate with cyber professionals to defend the DoDIN against threats.

Skills

SIEM proficiency

Network analysis

Cloud security concepts

Unix familiarity

SOC collaboration

Education

Bachelor's degree

Tools

NetFlow

Packet capture

Job description

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch at Fort Belvoir, VA. You will join a 24x7 SOC delivering threat detection, incident response, and vulnerability management to protect DoD networks.

Responsibilities include leading investigations, analyzing events, and developing incident response playbooks while collaborating with a fast-paced team. TS/SCI with SAP eligibility required.