DoD SOC Threat Hunter & Incident Analyst

00100 LEIDOS, INC.; Illinois; In loco; USD 70.000 - 126.000; Tempo pieno

Descrizione del lavoro

Leidos is seeking proactive Cyber Security Analysts for its 24x7 SOC team. You will defend DoD networks against sophisticated threats, investigate alerts, analyze logs, and produce detailed investigative reports for incident response and customers including USCYBERCOM.

The role emphasizes analytical thinking, threat intelligence, and hands-on engagement with SIEM/SOAR platforms, with a focus on maintaining robust security posture in a fast-paced environment.

Competenze

• Clearance: Active DoD Secret with ability to obtain TS/SCI.
• DoD 8570 IAT Level II certification (e.g., Security+ CE, SSCP, or SANS GSEC).
• DoD 8570 CSSP-Analyst certification (CEH/CySA+/GCIA or equivalent) within 180 days.
• Solid networking fundamentals, including OSI, ports, protocols, and defense-in-depth.
• Bachelor's degree and 2+ years of relevant experience; military experience considered in lieu of degree.
• Location: Commutable within 2 hours or relocate to Scott AFB, IL.

Mansioni

• Investigate and triage security alerts from endpoints, IDS/IPS, NetFlow, and sensors.
• Analyze logs, correlate data, and prepare detailed incident findings.
• Monitor threat feeds and IOC integration into SIEM platforms.
• Collaborate with incident response and communicate incidents to customers and USCYBERCOM.
• Maintain and operate 24x7 security coverage.

Conoscenze

SOC experience

Critical thinking

Self-motivation

Threat intelligence

Incident triage

Analytical skills

Formazione

Bachelor's degree

Strumenti

SIEM/SOAR

Packet analysis tools

Descrizione del lavoro

Leidos is seeking proactive Cyber Security Analysts for its 24x7 SOC team. You will defend DoD networks against sophisticated threats, investigate alerts, analyze logs, and produce detailed investigative reports for incident response and customers including USCYBERCOM.

The role emphasizes analytical thinking, threat intelligence, and hands-on engagement with SIEM/SOAR platforms, with a focus on maintaining robust security posture in a fast-paced environment.