Night Cyber Defense Analyst: Frontline Threat Hunter

Via Logic LLC; Suitland (MD); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a Cyber Defense Analyst (3rd Shift) in Suitland, MD to monitor and investigate security events, apply CND discipline knowledge, and support threat hunting for TS/SCI networks.

Responsibilities include incident ticketing, coordination with Tier 2, and delivering briefings. Requires TS/SCI clearance and 4+ years in related field; shift is 2330–0730 with potential floater shifts.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, or related field with 4+ years of experience or Master’s with 2+ years of experience.
• Active TS/SCI clearance.
• Concentrated experience in the CND discipline.
• Experience monitoring and investigating alerts from cybersecurity tools.
• Experience with SIEM systems such as Splunk and Elastic.
• Experience with NIDPS and host-based tools (Cisco FirePower, Palo Alto NGFW, Trellix ePO, MS Defender, Tanium).
• Knowledge of scripting languages (Python, PowerShell, etc.) and penetration testing tools.

Responsibilities

• Monitor and perform first-line analysis of alerts for TS/SCI networks (JWICS, ATLAS, HGCC).
• Monitor security tools for alerts, anomalies, indicators of compromise.
• Investigate alerts, escalate to Tier 2 as needed.
• Create and manage incident/event tickets in the ticketing system.
• Conduct proactive threat hunting and identify emerging threats.
• Perform wireless security scans and report findings.
• Correlate alerts across platforms to identify trends and threats.
• Prepare operational and situational awareness briefings.
• Support annual cyber defense exercises.

Skills

CND discipline

SIEM monitoring

NIDPS (FirePower / Palo Alto)

Threat hunting

Scripting / languages

Education

Bachelor's degree in Cybersecurity/IT

Tools

Splunk

Elastic

Trellix ePO

Microsoft Defender

Tanium

Job description

Leidos is seeking a Cyber Defense Analyst (3rd Shift) in Suitland, MD to monitor and investigate security events, apply CND discipline knowledge, and support threat hunting for TS/SCI networks.

Responsibilities include incident ticketing, coordination with Tier 2, and delivering briefings. Requires TS/SCI clearance and 4+ years in related field; shift is 2330–0730 with potential floater shifts.