Pacific Cyber Threat Lead – DCO & Intelligence

VulnU; Hawaii; On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

Learning budget

Retirement match

Paid parental leave

Equity

Job summary

Leidos is seeking a Cyber Threat Analyst to join the Defensive Cyber Operations team supporting DISA PAC at Pearl Harbor, HI. You will synthesize multi-source intelligence and telemetry to produce actionable threat intelligence, track campaigns, and direct threat-informed defense across boundary points and multi-clouds.

You will work with SIEMs like Splunk, Elastic, and Microsoft Defender, coordinate with national-level centers, and operate in a TS/SCI environment on classified networks.

Qualifications

• Bachelor’s degree with 4 years of relevant experience; or 8 years of equivalent military experience.
• Must hold DoD 8140/8570 baseline qualifications and related credentials.
• Active Top Secret with SCI eligibility or ability to obtain it upon start.

Responsibilities

• Analyze boundary sensor feeds, logs, and telemetry for warnings and attacks.
• Track adversary campaigns using MITRE ATT&CK and map TTPs to defense actions.
• Author threat intelligence products, briefs, and operational Tippers.
• Reconstruct intrusions from logs and telemetry to guide defenses.
• Coordinate with DJOC, USPACOM, DCDC, NSA for standardized reporting.

Skills

Threat analysis

Boundary analysis

MITRE ATT&CK usage

SIEM query (Splunk)

Threat intelligence

Education

Bachelor’s degree with 4 years relevant experience

Tools

Splunk

Elastic/Kibana

Microsoft Sentinel

Job description

Leidos is seeking a Cyber Threat Analyst to join the Defensive Cyber Operations team supporting DISA PAC at Pearl Harbor, HI. You will synthesize multi-source intelligence and telemetry to produce actionable threat intelligence, track campaigns, and direct threat-informed defense across boundary points and multi-clouds.

You will work with SIEMs like Splunk, Elastic, and Microsoft Defender, coordinate with national-level centers, and operate in a TS/SCI environment on classified networks.