Hybrid Defensive Cyber Ops Analyst (Up to 20% Telework)

Leidos; United States; Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos in Washington, DC seeks Defensive Cyber Operations Analysts to support a 24/7 DCO team protecting federal networks. Hybrid role with up to 20% telework; onboarding and shift flexibility are noted.

Responsibilities include incident detection, continuous monitoring, and technical leadership to translate complex events into actionable insights. The position requires DoD 8570 IAT Level II/III and CSSP certifications, a TS/SCI clearance, and a related bachelor’s degree.

Qualifications

• Bachelor's degree in a related discipline with 2+ years (Level II) / 4+ years (Level III) / 8+ years (Level IV) experience.
• DoD 8570 IAT Level II/III certification or higher within 180 days.
• DoD 8570 CSSP Analyst certification or within 180 days.
• DoD 8570 CSSP Infrastructure Support certification or within 180 days.
• Strong networking knowledge and familiarity with security devices.

Responsibilities

• Detect and respond to enterprise cyber threats with incident detection and characterization.
• Continuous security monitoring across tools, investigate alerts, and develop mitigations.
• Follow SOPs with meticulous documentation and timely system checks.
• Provide technical leadership and review investigations for clarity.
• Develop and deliver technical briefings to senior management.
• Maintain high-quality documentation in ticketing systems for audits.
• Coordinate with team members in a collocated environment for high-tempo operations.
• Support defensive operations across network/host/application security devices.

Skills

Networking knowledge

PCAP analysis

IDS/IPS familiarity

Firewalls

Security clearance TS/SCI

Education

DoD 8570 IAT Level II/III certification or higher

CSSP Analyst certification

CSSP Infrastructure Support certification

Tools

Splunk

Elastic

Job description

Leidos in Washington, DC seeks Defensive Cyber Operations Analysts to support a 24/7 DCO team protecting federal networks. Hybrid role with up to 20% telework; onboarding and shift flexibility are noted.

Responsibilities include incident detection, continuous monitoring, and technical leadership to translate complex events into actionable insights. The position requires DoD 8570 IAT Level II/III and CSSP certifications, a TS/SCI clearance, and a related bachelor’s degree.