Senior Cyber Fusion Analyst Threat Intel & Response

Leidos Inc; Odenton (MD); On-site; USD 131,300 - 237,350; Full time

Job summary

Leidos Defense Group has an opening for a Cyber Security Fusion Analyst on the DISA GSM-O II program supporting Joint Force Headquarters DODIN at Fort Meade.

In this role you will handle incidents, triage events, analyze network data, detect threats, develop metrics, and share vulnerability information to strengthen enterprise defenses. Qualifications include active TS/SCI clearance and DoD 8570 Level II certification.

Qualifications

• Active DoD TS/SCI Clearance and eligible for polygraph.
• Bachelor's Degree in a related discipline with 12+ years of experience (or equivalent).
• Security+ or DoD 8570 Level II certification.
• In-depth knowledge of network and application protocols, vulnerabilities and threat methodologies.
• Proficiency with datasets, tools and protocols for analysis (e.g., DNS, VirusTotal, FT, TCP/IP, OSI, WHOIS, Threat indicators, Wireshark, Splunk).
• Experience with open-source and commercial vendor portals for threat intel.

Responsibilities

• Leverage network monitoring and detection capabilities to identify cyber adversary activity.
• Develop Cyber Fusion SOPs and Frameworks based on DoD guidance.
• Identify threats and provide mitigation strategies to reduce attack surface.
• Analyze threat reports, OSINT, and vulnerability information to develop prioritized plans.
• Document adversary TTPs and align to enterprise vulnerabilities.
• Detect anomalies in sensors, logs, and SIEMs; produce analytic summaries.

Skills

DoD TS/SCI Clearance

Security+ Certification

Bachelor's Degree + 12 years exp

Network/protocol knowledge

Threat analysis experience

Education

Bachelor's Degree in related discipline

Tools

Wireshark

Splunk

Arcsight

PCAP analysis

Job description

Leidos Defense Group has an opening for a Cyber Security Fusion Analyst on the DISA GSM-O II program supporting Joint Force Headquarters DODIN at Fort Meade.

In this role you will handle incidents, triage events, analyze network data, detect threats, develop metrics, and share vulnerability information to strengthen enterprise defenses. Qualifications include active TS/SCI clearance and DoD 8570 Level II certification.