Hybrid Cyber Defense Analyst — Threat Detection & Response

Leidos LLC; Washington; Hybrid; USD 87,000 - 157,000; Full time

Benefits offered by this job

Hybrid work up to 20% Telework

Job summary

Leidos is seeking Defensive Cyber Operations Analysts to support a 24/7 DCO team in the Washington, DC area. This hybrid role offers up to 20% telework and shifts across Day, Swing, and Mid. You will detect incidents, monitor security tools, and provide technical leadership with senior stakeholders.

DoD certifications and TS/SCI clearance are required or to be obtained within 180 days. The role emphasizes rigorous documentation, collaboration, and rapid, clear communication to protect national

Qualifications

• Bachelor's degree in a related discipline and professional experience per level.
• DoD 8570 IAT Level II/III certification required or to be obtained within 180 days.
• DoD 8570 CSSP Analyst certification or equivalent within 180 days.
• DoD 8570 CSSP Infrastructure Support certification or equivalent within 180 days.
• Strong networking knowledge and experience with security tools and event analysis.
• Current DoD TS/SCI clearance and ability to pass screenings.

Responsibilities

• Detect and characterize network incidents and anomalies.
• Monitor security tools, investigate alerts, and develop mitigations.
• Follow SOPs and document actions clearly in tickets.
• Brief senior management with translate security events into actions.
• Maintain high-quality technical writeups for audit trails.
• Communicate across teams in a collocated, high-tempo environment.
• Support CSSP with detection, response, and recovery activities.

Skills

Incident response

Continuous security monitoring

Technical leadership

Security writing

Communication with stakeholders

Education

Bachelor's degree in a related discipline

Tools

SIEM (Splunk)

SIEM (Elastic)

Firewall / IDS/IPS

Job description

Leidos is seeking Defensive Cyber Operations Analysts to support a 24/7 DCO team in the Washington, DC area. This hybrid role offers up to 20% telework and shifts across Day, Swing, and Mid. You will detect incidents, monitor security tools, and provide technical leadership with senior stakeholders.

DoD certifications and TS/SCI clearance are required or to be obtained within 180 days. The role emphasizes rigorous documentation, collaboration, and rapid, clear communication to protect national