On-site DoD Cyber Mission Lead (5x8 Shift)

Leidos; Illinois; Sur place; USD 87 000 - 157 000; Plein temps

Résumé du poste

Leidos is seeking a TS Mission Lead to guide a 24x7 defensive cyber operations team responsible for monitoring and incident management on DoD classified networks. The role emphasizes leadership, threat analysis, and rapid recall readiness from a secure SCIF.

You will coordinate advanced incident response, mentor staff, and ensure alignment with MITRE ATT&CK and Cyber Kill Chain frameworks, while maintaining a 5x8 day shift in a 100% on-site environment near Hill AFB/Scott AFB/Columbus.

Qualifications

• Active DoD Top Secret / SCI clearance.
• DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, SSCP, GSEC, CySA+).
• CSSP-A or CSSP-IR certification (e.g., CySA+, CEH, GCIA, GCIH), or ability to obtain within 180 days of hire.
• Strong TCP/IP networking, packet analysis (Wireshark/tcpdump), OSI model, and defense-in-depth principles.
• Bachelor’s degree plus 4 or 8 years of relevant operational cyber defense or SOC experience.

Responsabilités

• Lead analysts in evaluating alerts from endpoints, IDS/IPS, NetFlow, and custom network sensors across classified enclaves to identify, investigate, and mitigate sophisticated malicious activity.
• Correlate multi-source log data to produce detailed Cyber Incident Reports (CIR) and align analysis with MITRE ATT&CK and Cyber Kill Chain frameworks.
• Direct incident reporting and containment actions and escalate validated, critical security incidents to customer leadership, JFHQ-DODIN, and USCYBERCOM as required.

Connaissances

Team leadership

Coaching & mentoring

Threat analysis

Incident response

Communication

Policy compliance

Formation

Bachelor's degree + 4 years SOC experience

Bachelor's degree + 8 years SOC experience

Outils

Splunk

Elastic

Sentinel

Description du poste

Leidos is seeking a TS Mission Lead to guide a 24x7 defensive cyber operations team responsible for monitoring and incident management on DoD classified networks. The role emphasizes leadership, threat analysis, and rapid recall readiness from a secure SCIF.

You will coordinate advanced incident response, mentor staff, and ensure alignment with MITRE ATT&CK and Cyber Kill Chain frameworks, while maintaining a 5x8 day shift in a 100% on-site environment near Hill AFB/Scott AFB/Columbus.