Hybrid Cyber Threat Hunter & Intel Analyst

Leidos; United States; Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos' Digital Sector seeks Cyber Analysts for Defensive Cyber Operations in Washington, DC, with 24/7 shifts and up to 20% telework. Roles are for winter/spring 2027, supporting federal networks against threats to national security. Core hours are 0600–1600; some weekend work may be required.

Requires DoD TS/SCI clearance and advanced degree/experience as described. Responsibilities include threat hunting, threat intel production, and cyber fusion activities, leveraging MITRE ATT&CK to surface

Qualifications

• Current DoD TS/SCI clearance and ability to pass screening
• Level III/IV education requirements: bachelor’s degree with relevant work experience or higher

Responsibilities

• Threat Hunting across cloud, identity, and network infrastructure
• Produce intelligence reports on emerging threats and actor motivations
• Synthesize external threat intel with internal hunt telemetry for unified situational awareness
• Collaborate with detection engineering to convert hunt findings into detection rules
• Maintain the team’s single source of truth for threat data

Skills

Threat hunting

Threat intelligence

Cyber fusion

MITRE ATT&CK

SPL (Splunk)

KQL (Kusto)

Elastic DSL

Python

PowerShell

Bash

AWS

Azure

O365

Threat intelligence platforms

Education

Bachelor's degree or higher in a related discipline

Tools

Anomali

ThreatConnect

MISP

Job description

Leidos' Digital Sector seeks Cyber Analysts for Defensive Cyber Operations in Washington, DC, with 24/7 shifts and up to 20% telework. Roles are for winter/spring 2027, supporting federal networks against threats to national security. Core hours are 0600–1600; some weekend work may be required.

Requires DoD TS/SCI clearance and advanced degree/experience as described. Responsibilities include threat hunting, threat intel production, and cyber fusion activities, leveraging MITRE ATT&CK to surface