RTA

00100 LEIDOS, INC.; Illinois; On-site; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking proactive Cyber Security Analysts for its 24x7 SOC team. You will defend DoD networks against sophisticated threats, investigate alerts, analyze logs, and produce detailed investigative reports for incident response and customers including USCYBERCOM.

The role emphasizes analytical thinking, threat intelligence, and hands-on engagement with SIEM/SOAR platforms, with a focus on maintaining robust security posture in a fast-paced environment.

Qualifications

• Clearance: Active DoD Secret with ability to obtain TS/SCI.
• DoD 8570 IAT Level II certification (e.g., Security+ CE, SSCP, or SANS GSEC).
• DoD 8570 CSSP-Analyst certification (CEH/CySA+/GCIA or equivalent) within 180 days.
• Solid networking fundamentals, including OSI, ports, protocols, and defense-in-depth.
• Bachelor's degree and 2+ years of relevant experience; military experience considered in lieu of degree.
• Location: Commutable within 2 hours or relocate to Scott AFB, IL.

Responsibilities

• Investigate and triage security alerts from endpoints, IDS/IPS, NetFlow, and sensors.
• Analyze logs, correlate data, and prepare detailed incident findings.
• Monitor threat feeds and IOC integration into SIEM platforms.
• Collaborate with incident response and communicate incidents to customers and USCYBERCOM.
• Maintain and operate 24x7 security coverage.

Skills

SOC experience

Critical thinking

Self-motivation

Threat intelligence

Incident triage

Analytical skills

Education

Bachelor's degree

Tools

SIEM/SOAR

Packet analysis tools

Job description

We are seeking proactive defenders who bring Security Operations Center (SOC) experience, exceptional critical thinking skills, and a self-motivated approach to safeguarding infrastructure as Cyber Security Analysts in our 24x7 front-line security operations team. In this role, you will be directly responsible for defending Department of Defense (DoD) networks against sophisticated, rapidly evolving cyber threats.

Primary Responsibilities

Investigate and triage security alerts generated from endpoints, IDS/IPS, NetFlow data, and custom sensors to identify suspicious activity.

Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations, producing detailed technical findings and reports.

Monitor and integrate DoD and open-source threat intelligence feeds and Indicators of Compromise (IOCs) into security sensors and SIEM platforms.

Collaborate closely with incident response teams and ensure timely, clear communication of security incidents to customers and USCYBERCOM.

Key Skillsets We Are Looking For

SOC Experience

You understand the operational flow, high tempo demands, and rigorous standards of a 24x7 Security Operations Center. You are comfortable executing structured incident triage and escalation protocols.

Critical Thinking & Adversary Mindset

You possess the ability to look beyond the surface of an alert. You excel at correlating disparate data points, analyzing raw packet data, and conducting deep-dive investigation of complex security events to uncover sophisticated malicious activity.

Demonstrated Self-Motivation

You are a self-starter who takes active ownership of your professional development. Whether pursuing advanced certifications, researching emerging threat vectors, or mastering new tools, you drive your own growth.

Thrives on Change

The threat landscape and tactical priorities shift constantly. You demonstrate high operational adaptability, viewing unexpected shifts as opportunities to excel, and seamlessly pivot to adopt new processes, security tools, and analytical methodologies to counter evolving adversaries or challenges.

Shift & Operational Requirements

Predictable Work-Life Balance

To support your well-being, we utilize a predictable five-day, 8-hour shift structure.

Shift Options to Fit Your Lifestyle

Our 24x7 mission requires continuous coverage, but it also provides the opportunity to align your work hours with your personal routine.

Key coverage windows include:

• Day Shift: 8:00 AM - 4:00 PM
• Swing Shift: 4:00 PM - 12:00 AM
• Mid Shift: 12:00 AM - 8:00 AM

Flexibility: We highly value your work-life balance and make every effort to honor your shift preferences whenever possible. While final assignments must ensure critical program requirements are met, we strive to manage scheduling with a balanced approach that respects our team members' personal needs alongside mission readiness.

Required Qualifications

• Clearance: Active DoD Secret clearance, with the ability to obtain and maintain a TS/SCI.
• Baseline Certification: Current DoD 8570 IAT Level II (or higher) certification, such as CompTIA Security+ CE, ISC2 SSCP, or SANS GSEC (or equivalent 8140 requirements).
• Specialized Certification: Ability to obtain a DoD 8570 CSSP-Analyst level certification (e.g., CEH, CySA+, GCIA, or equivalent) within 180 days of hire.
• Technical Core: Solid foundation in networking principles, including packet analysis, common ports/protocols, traffic flow, the OSI model, and defense-in-depth architecture.
• Bachelor's degree and 2+ years of relevant experience (Equivalent professional work or military experience will be considered in lieu of a degree).
• Location: Commutable distance (within 2 hours) or ability to self-relocate to Scott AFB, IL.

Preferred Qualifications

• Prior experience working within Defense Information Systems Agency (DISA) or DOD Environments.
• Experience applying intelligence-driven defense strategies utilizing the MITRE ATT&CK or Cyber Kill Chain frameworks, including a deep understanding of intrusion set tactics, techniques, and procedures (TTPs).
• In-depth experience utilizing SIEM/SOAR platforms to perform behavioral and statistical analysis across multiple log types.
• Knowledge or experience in defending cloud environments (AWS, Azure, GCP) or administering enterprise mobile security (MDM, MAM, MTD).
• Basic scripting and programming skills to automate routine analytical tasks.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting

November 12, 2026

For U.S. Positions

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $69,550.00 - $125,725.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.