DoD Cyber Defense Mission Lead — 24x7 On-Site

Leidos Inc; Shiloh (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a TS Mission Lead to guide a 24x7 defensive cybersecurity operations team across DoD Top Secret and classified networks. This on-site role requires coordination with leadership, incident response, and threat intelligence while maintaining mission readiness within a SCIF environment.

The position follows a core 5x8 day shift with emphasis on team development, coaching, and cross-site collaboration, including Hill AFB, UT; Scott AFB, IL; and Columbus, OH.

Qualifications

• Active DoD Top Secret / SCI clearance.
• DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, SSCP, GSEC, CySA+).
• CSSP-A or CSSP-IR certification or ability to obtain within 180 days of hire.
• Strong TCP/IP networking, packet analysis (Wireshark/tcpdump), OSI model, defense-in-depth."
• Level III/IV: Bachelor's degree + 4/8 years of relevant operational cyber defense or SOC experience.
• On-site SCIF requirement; willing to work the 5x8 schedule; reside within a 2-hour recall commute of Hill AFB, UT; Scott AFB, IL; or Columbus, OH

Responsibilities

• Lead 24x7 defensive cybersecurity monitoring and incident operations across DoD Top Secret and classified networks.
• Coach and develop team; conduct 1-on-1 check-ins every two weeks.
• Coordinate incident response with customer leadership, JFHQ-DODIN, and USCYBERCOM per DoD reporting standards.
• Ensure shift coverage, training schedules, and mission readiness within the SCIF.
• Integrate threat intelligence with SIEM; align with MITRE ATT&CK and Cyber Kill Chain frameworks.
• Communicate with program and customer leadership on incidents and performance.

Skills

Team leadership

Incident response

Threat intelligence

Communication

Education

Bachelor's degree

Tools

Wireshark

tcpdump

Splunk

Elastic

Job description

Leidos is seeking a TS Mission Lead to guide a 24x7 defensive cybersecurity operations team across DoD Top Secret and classified networks. This on-site role requires coordination with leadership, incident response, and threat intelligence while maintaining mission readiness within a SCIF environment.

The position follows a core 5x8 day shift with emphasis on team development, coaching, and cross-site collaboration, including Hill AFB, UT; Scott AFB, IL; and Columbus, OH.