Hybrid Cyber Defense Analyst — Incident Response & Briefings

Leidos; Washington; Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos in Washington, DC is seeking Defensive Cyber Operations Analysts to support a DCO team providing 24/7 security for federal networks. The role emphasizes incident detection, continuous monitoring, and leadership in security investigations.

The position is hybrid with up to 20% telework; onboarding includes training across shifts. DoD 8570 certifications and TS/SCI or equivalent screenings may be required.

Qualifications

• Bachelor’s Degree in a related discipline and professional experience commensurate with level.
• DoD 8570 IAT Level II/III certification (or within 180 days).
• DoD 8570 CSSP Analyst certification (or within 180 days).
• DoD 8570 CSSP Infrastructure Support certification (or within 180 days).

Responsibilities

• Incident Detection & Characterization: Detect and respond to anomalous activity signaling enterprise threats.
• Continuous Security Monitoring: Monitor tools, investigate alerts, and develop mitigation plans.
• Operational Rigor: Follow SOPs with attention to detail and maintain accurate documentation.
• Technical Leadership & Influence: Advise on solution design and review investigations for accuracy.
• Senior-Level Briefing: Prepare briefings for senior management.",
• Detailed Documentation: Document events and analyses in the ticketing system.
• Collaborative Coordination: Communicate with customers and team members in a fast-paced environment.
• Adaptive Defense: Support CSSP with detect, response, and recovery activities.

Skills

SOC Excellence

Framework Expertise

Intrusion Analysis

Response Guidance

Technical Writing

Education

Bachelor’s Degree in a related discipline

DoD 8570 IAT Level II/III certification (within 180 days)

CSSP Analyst certification (within 180 days)

CSSP Infrastructure Certification (within 180 days)

Tools

Splunk

Elastic

Job description

Leidos in Washington, DC is seeking Defensive Cyber Operations Analysts to support a DCO team providing 24/7 security for federal networks. The role emphasizes incident detection, continuous monitoring, and leadership in security investigations.

The position is hybrid with up to 20% telework; onboarding includes training across shifts. DoD 8570 certifications and TS/SCI or equivalent screenings may be required.