Senior SIEM SME - Defense Cyber Ops (On Site)

Leidos; Illinois; On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Security Information and Event Management Subject Matter Expert for the GSM-O II program, based on-site at Scott Air Force Base, IL. You will support DEFENSE Information Systems Agency and DISA operations, delivering analytics, visualizations, and workflows to empower cyber defense analysts.

Required TS/SCI eligibility, DoD 8570 IAT II or higher, and CSSP-Analyst within 180 days. Bachelor’s degree with 8+ years’ experience in SIEM, with strong networking and threat analytics

Qualifications

• Active DoD Top Secret clearance with ability to obtain TS/SCI
• Bachelor's degree with 8+ years of related experience
• Deep expertise with enterprise SIEM platforms (Elastic/Kibana, MDE/Sentinel) and threat analytics
• Experience analyzing high-volume logs, Netflow, and attack artifacts
• Ability to obtain CSSP-Analyst certification within 180 days of hire

Responsibilities

• Maintain and support active and upcoming SIEM platforms.
• Administer enterprise SIEM platforms and analytics across their lifecycle.
• Research analytics and detections to develop defensive solutions.
• Train analysts on SIEM tools and workflows.
• Identify and track outages and complex issues requiring escalation.
• Coordinate with government stakeholders to integrate capabilities.
• Deliver complex technical reports with clear written/verbal communication.

Skills

Clearance & location

DoD TS/SCI eligibility

SIEM & analytics

Threat analysis

Networking & telemetry

Education

Bachelor's degree in related discipline

Tools

Elastic/Kibana

MDE/Sentinel

Tines

Darktrace

Job description

Leidos is seeking a Security Information and Event Management Subject Matter Expert for the GSM-O II program, based on-site at Scott Air Force Base, IL. You will support DEFENSE Information Systems Agency and DISA operations, delivering analytics, visualizations, and workflows to empower cyber defense analysts.

Required TS/SCI eligibility, DoD 8570 IAT II or higher, and CSSP-Analyst within 180 days. Bachelor’s degree with 8+ years’ experience in SIEM, with strong networking and threat analytics