Senior DCO Analyst

Leidos; Maryland; On-site; USD 117,000 - 195,000; Full time

Job summary

Leidos is seeking a Sr. Defensive Cyber Operations Analyst for the GSM-O II program at Fort Meade, MD. You will monitor networks, triage incidents, and coordinate vulnerability mitigation with cross-functional teams to protect DoD networks.

The role requires DoD TS/SCI clearance, WRC 511 intermediate certs, and SIEM experience. Strong collaboration with leadership and clients is essential to success on this mission-driven program.

Qualifications

• Bachelor's degree in a related discipline with 8+ years of education/experience.
• Active DoD TS/SCI Clearance.
• DoD-8140 WRC 511 Intermediate certification to start.
• SIEM tool experience: ArcSight, Splunk, Elastic, etc.
• Knowledge of network protocols, cyber vulnerabilities and threat methodologies.
• CND experience within a Computer Incident Response organization.
• Ability to work independently and in a team.

Responsibilities

• Execute continuous network monitoring and incident handling.
• Triage events and develop AO-specific trends.
• Support cross-functional forums for vulnerability scoring and mitigation.
• Develop, coordinate, release, and comply with orders.
• Provide threat analysis and recommendations with senior leadership.
• Leverage intelligence to reduce enterprise exposure.
• Identify problems and produce timely, action-oriented recommendations.

Skills

DoD TS/SCI Clearance

SIEM experience

Cyber security concepts

Independent and team work

Education

Bachelor's degree in a related discipline

Tools

ArcSight

Splunk

Elastic

Job description

The Leidos Digital Modernization Sector has an opening for a Sr. Defensive Cyber Operations Analyst on the GSM-O II program supporting the DISA Joint Operations Center (D2OC) at Fort Meade, Maryland.

Program Summary:

GSM-O II enables Current Operations Command, Control, and Defensive Cyber Operations (DCO) functions across all - Combatant Commands, Service Cyber Components, Agencies, and Field Activities’ (CC/S/A/FAs) Area of Operations (AOs) in addition to 24/7 coordination with USCYBERCOM and other partner agencies.

Primary Responsibilities:

• Execute continuous network monitoring and incident handling/problem resolution.
• Triage events, incidents, and assist with developing AO specific trends.
• Support various collaborative and cross functional forums (Intelligence, Current Operations, Future Operations, Logistics, Planning, Resourcing and Requirements) to achieve centrally coordinated, threat informed and prioritized vulnerability scoring and mitigation methodology.
• Support the development, coordination, release, and compliance of orders
• Provide threat analysis, track relevant prioritized incidents, and provide recommendations in coordination with the Cross Functional Fusion Team.
• Leverage intelligence and operational data, information, and processes to identify threats, improve security, and reduce the enterprise’s exposure to vulnerabilities.
• Identify problems, determine accuracy and relevance of a broad range of technical information. Use sound judgment to generate, evaluate, and execute alternative courses of action. Produce timely, effective, decision-quality technical recommendations to support senior leadership.
• Actively engage with a variety of customers and mission partners, anticipating their needs, and delivering flawlessly.

Required Qualifications:

• Bachelor's degree in a related discipline with 8+ years of applicable combined education and experience; additional related years of experience is accepted in lieu of a degree.
• Active DoD TS/SCI Clearance
• Must have a DoD-8140 WRC 511 Intermediate certification (see list below for acceptable certifications) to start.
• SIEM Tool Experience (ArcSight, Splunk, Elastic, etc..)
• Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques and cyber threat/adversary methodologies (TTPs)
• Computer Network Defense (CND) experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization. Requires a deep understanding and the ability to apply cyber security related principles, theories, and concepts.
• Work independently and as part of a team to develop solutions to issues that are unclear and require deep technical knowledge.

Preferred Qualifications:

• Experience with DISA/DCDC and DoD Networks.
• Knowledge of the DoD orders process
• Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Experience in building extended cyber security analytics.
• Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intelligence driven defense and/or Cyber Kill Chain methodology.
• Experience with User Acceptance Testing (UAT)

WRC 511 Intermediate Certifications

• CEH(P)
• GMON
• GRID
• Cloud+
• FITSP-O
• GCED
• GDSA
• GSEC
• PenTest+
• Security+

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Pay Range:

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.