DTIP Integrations SME

Via Logic LLC; Whitehall (OH); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos' Digital Modernization sector is seeking an experienced Cyber Threat Intelligence professional to own the Threat Intelligence Platform integration and sustain CTI fusion across DISA capabilities. This role supports DoW/DoWIN initiatives with on-site requirements at Scott AFB, Hill AFB, or Columbus, OH, with partial hybrid telework possible.

You will integrate CTI feeds, develop zero-fault defending actions, and craft high-impact papers for senior government officials, while using Python,

Qualifications

• Must have active TS/SCI clearance.
• Bachelor's degree in a related discipline and 4+ years of directly relevant experience; additional related years of experience accepted in lieu of a degree.
• 2+ years of experience with Threat Intelligence Platforms (TIPs) and configuring threat feed integrations.
• Proficiency in Python.
• Experience with JSON and YAML configuration editing.
• Experience with Git version control.
• Knowledge of CBII, Palo Alto, ERS, Versa integrations in enterprise environments.
• 8140 Cyber Defense Infrastructure Support Specialist 521 (CS) Intermediate-level compliance with Security+, PenTest+, CySA+, GSEC, or GMON.

Responsibilities

• Act as the mission owner for sustained Threat Intelligence Platform support, driving CTI fusion and integration of blocking capabilities.
• Maintain and enhance capability performance by integrating threat feeds across DISA capabilities (CBII, Palo Alto, ERS, Versa).
• Integrate block lists to support automated defensive solutions (Bladeguard).
• Fuse multiple intelligence sources to develop products, provide strategic recommendations, and prioritize focus.
• Research and investigate current threats; map adversary activities using MITRE ATT&CK.
• Analyze data and threat reports to evaluate adversary capabilities, intentions, tactics, and behaviors.
• Produce papers, presentations, and recommendations for senior U.S. government officials.
• Support government and CSWOs in IOC management, blocking, and troubleshooting.

Skills

Python

JSON

YAML

Git

TIPs

TS/SCI clearance

Education

Bachelor's degree or related discipline

Tools

CBII

Palo Alto

ERS

Versa

Job description

Leidos' Digital Modernization sector has a current job opportunity for a Threat Intelligence Platform Integrations SME. We are seeking an experienced Cyber Threat Intelligence (CTI) professional to act as a mission owner for our Threat Intelligence Platform. As a Threat Intelligence Platform Integrations SME at DISA Global, you will provide sustained support for CTI fusion, low-regret model scoring, and the implementation of blocking actions to create advanced defensive capabilities. You will play a critical role in maintaining this capability, optimizing its performance, and integrating it across various DISA security solutions to enhance the overall defense of the Department of War Information Network (DoWIN).

You will use your technical expertise to enable the fusion of intelligence, inform threat investigations, and drive automated defense mechanisms. Additionally, you will continue to strengthen your skills while supporting the sustainment and development of critical platforms in support of the DoW and COCOMs.

This position can be based out of any of our three core sites - Scott AFB, IL; Hill AFB, UT; or Columbus, OH. Partial/hybrid telework may be allowed, but a consistent on-site presence is required.

PRIMARY RESPONSIBILITIES:

• Act as the mission owner for sustained Threat Intelligence Platform support, driving CTI fusion, low-regret model scoring, and the integration of blocking capabilities.
• Maintain and enhance capability performance by integrating threat feeds across various DISA capabilities, including Cloud Based Internet Isolation (CBII), Palo Alto, Enterprise Recursive Services (ERS), and Versa.
• Integrate block lists to support automated defensive solutions, specifically leveraging the Bladeguard solution.
• Fuse multiple intelligence sources to develop comprehensive products, provide strategic recommendations, and prioritize organizational focus.
• Research and investigate current threats; map adversary activities using the MITRE ATT&CK Framework.
• Analyze data and threat intelligence reports to evaluate adversary capabilities, intentions, tactics, and behaviors.
• Produce high-quality papers, presentations, and recommendations for senior U.S. government intelligence and operations officials.
• Support government and CSWOs in the areas of IOC management, blocking, and overall troubleshooting

BASIC QUALIFICATIONS:

• Must have an active TS/SCI due to classified intelligence analysis.
• Bachelor's degree in a related discipline and 4+ years of directly relevant experience; additional related years of experience is accepted in lieu of a degree.
• 2+ years of experience working with Threat Intelligence Platforms (TIPs) and configuring threat feed integrations.
• Proficiency in programming using Python.
• Proven experience with configuration editing using both JSON and YAML.
• Experience with leveraging version control systems such as Git.
• Applied knowledge of various security solutions and their integrations as employed in enterprise environments, specifically CBII, Palo Alto, ERS, and Versa.
• Requires 8140 Cyber Defense Infrastructure Support Specialist 521 (CS) Intermediate-level compliance, to include one of the following certifications: Security+, PenTest+, CySA+, GSEC, or GMON.

PREFERRED SKILLS:

• Deep understanding of defensive tactics, techniques, and procedures (TTPs) for threat detection and response.
• Experience with automated block list integrations and solutions.
• Experience with integration of systems as well as assessing, scoring, and operationalizing new CTI feeds
• Knowledge utilizing STIX and TAXII standards to develop, configure, and automate threat intelligence solutions across enterprise security platforms
• Experience with Integrated Adaptive Cyber Defense: "Low-Regret" Methodology for CTI Triage
• Advanced experience assessing emerging threats and vulnerabilities and the CTI lifecycle.
• Skills building and reading data dictionaries
• Exceptional written and verbal communication skills tailored for senior intelligence and operational leadership.
• Prior experience functioning as a capability or mission owner within a DoW or Intelligence Community environment.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

September 14, 2026

Pay Range:

Pay Range $87,100.00 - $157,450.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.