On-Site DoD Cyber Threat Analyst (24/7)

Leidos; Arlington (VA); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

On-site in Arlington

Job summary

Leidos in the Washington DC area is seeking a Cyber Security Analyst for the DISA GSMO-II program. The role provides 24x7 monitoring and analysis of DoD networks above SECRET, performing threat intelligence, correlating security events, and supporting incident response.

This on-site Arlington, VA position requires flexible shifts, onboarding, and strong reporting skills. Candidates must have DoD Top Secret clearance eligibility, a relevant degree, and hands-on experience with TCP/IP, SIEMs, and

Qualifications

• Bachelor's degree required; 4+ years of relevant experience or Cyber courses/certifications may substitute.
• Active DoD Top Secret clearance eligibility required.
• Strong understanding of TCP/IP, ports, protocols, and OSI model.

Responsibilities

• Review DoD and open-source intelligence for threats and IOCs.
• Utilize alerts from endpoints, IDS/IPS, netflow, and sensors to identify compromises.
• Review large log files, correlate evidence for incident investigations.
• Triage alerts and report incidents to customers and USCYBERCOM.
• Develop, deploy, and maintain analytics and countermeasures.

Skills

Cybersecurity analysis

Incident response

Threat intelligence

SIEM experience

Network forensics

Unix/Linux CLI

TCP/IP knowledge

Communication skills

Education

Bachelor's Degree

DoD 8570 IAT Level II certification

DoD 8570 CSSP-A certification (CEH/CySA+/GCIA)

Tools

Splunk ES

Elastic

Suricata

Zeek

Full Packet Capture

Job description

Leidos in the Washington DC area is seeking a Cyber Security Analyst for the DISA GSMO-II program. The role provides 24x7 monitoring and analysis of DoD networks above SECRET, performing threat intelligence, correlating security events, and supporting incident response.

This on-site Arlington, VA position requires flexible shifts, onboarding, and strong reporting skills. Candidates must have DoD Top Secret clearance eligibility, a relevant degree, and hands-on experience with TCP/IP, SIEMs, and