Mission Lead, Cyber Defense Ops (DoD SCIF)

Via Logic LLC; Whitehall (OH); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a TS Mission Lead to guide an on-site cybersecurity operations team delivering 24x7 monitoring and incident response for DoD classified networks. The role focuses on leadership, team development, and coordinating with leadership and customer teams from a SCIF.

Responsibilities include coaching, advanced training, threat triage, and incident reporting aligned with MITRE ATT&CK and Cyber Kill Chain. On-site 5x8 schedule with recalls near Hill AFB / Scott AFB / Columbus.

Qualifications

• Active DoD Top Secret/SCI clearance
• Current DoD 8570/8150 IAT Level II baseline certification (e.g., Security+ CE, SSCP, GSEC, CySA+)
• Current CSSP-A or CSSP-IR certification, or ability to obtain within 180 days of hire
• Strong technical mastery of TCP/IP networking, packet analysis (Wireshark/tcpdump), the OSI model, and defense-in-depth
• Bachelor’s degree + 4 or 8 years of relevant cyber defense/SOC experience (Level III/IV) or equivalent
• 100% on-site SCIF; willing to work 5x8 and reside within a 2-hour recall commute of Hill AFB, UT; Scott AFB, IL; or Columbus, OH

Responsibilities

• Lead 1-on-1 coaching and mentoring to staff every two weeks
• Facilitate advanced technical training and certification paths
• Establish mission-aligned performance expectations and address gaps
• Maintain psychological safety and strong HR/leadership ties
• Coordinate shift coverage, training schedules, and mission readiness in SCIF
• Triage alerts from endpoints/IDS/NetFlow to identify and mitigate threats
• Produce detailed CIRs and align analysis with MITRE ATT&CK and Cyber Kill Chain
• Direct incident reporting and containment actions to leadership and DoD customers

Skills

Team leadership

Coaching & mentoring

Threat intelligence

Incident response coordination

Communication with leadership

Analytical thinking

Education

Bachelor’s degree + 4 years SOC experience (Level III)

Bachelor’s degree + 8 years SOC experience (Level IV)

Tools

SIEM platforms (Splunk, Elastic, Sentinel)

NetFlow analysis

TCP/IP networking

Wireshark/tcpdump

Job description

Leidos is seeking a TS Mission Lead to guide an on-site cybersecurity operations team delivering 24x7 monitoring and incident response for DoD classified networks. The role focuses on leadership, team development, and coordinating with leadership and customer teams from a SCIF.

Responsibilities include coaching, advanced training, threat triage, and incident reporting aligned with MITRE ATT&CK and Cyber Kill Chain. On-site 5x8 schedule with recalls near Hill AFB / Scott AFB / Columbus.