On-Site DoD Cyber Defense Mission Lead

Leidos; Shiloh (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos seeks a TS/SCI-cleared Mission Lead to guide a 24x7 defensive cybersecurity team across DoD networks. The role emphasizes threat intel, alert triage, packet analysis, and high-impact incident coordination on a 5x8 on-site schedule.

You will mentor analysts, drive advanced training, and ensure policy compliance while aligning operations with customer leadership and program goals.

Qualifications

• Clearance: Active DoD Top Secret / SCI.
• Foundational knowledge: TCP/IP networking, packet analysis, OSI model, defense-in-depth.

Responsibilities

• Lead analysts in evaluating alerts from endpoints, IDS/IPS, NetFlow, and custom network sensors to identify and mitigate activity.
• Correlate multi-source logs to produce Cyber Incident Reports and align with MITRE ATT&CK/Cyber Kill Chain in SIEM.
• Direct incident reporting and containment actions, escalating to leadership and DoD customers per requirements.

Skills

Team leadership

Incident response

Threat intelligence

Packet analysis

MITRE ATT&CK

Cyber Kill Chain

Education

Level III: Bachelor’s degree + 4 years cyber defense/SOC experience

Level IV: Bachelor’s degree + 8 years cyber defense/SOC experience

DoD 8570/8140 IAT II baseline certification (e.g., Security+ CE, SSCP, GSEC, CySA+)

CSSP-A or CSSP-IR certification (e.g., CySA+, CEH, GCIA, GCIH)

Tools

Splunk

Elastic

Microsoft Sentinel

Job description

Leidos seeks a TS/SCI-cleared Mission Lead to guide a 24x7 defensive cybersecurity team across DoD networks. The role emphasizes threat intel, alert triage, packet analysis, and high-impact incident coordination on a 5x8 on-site schedule.

You will mentor analysts, drive advanced training, and ensure policy compliance while aligning operations with customer leadership and program goals.