Senior SOC Analyst—DoD TS/SCI Clearance

Leidos; Shiloh (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a proactive Security Operations Center (SOC) Analyst to join our 24x7 front-line security operations team focused on protecting mission environments against sophisticated cyber threats. Responsibilities include investigating alerts from endpoints, IDS/IPS, and NetFlow, performing deep-dive analyses of classified logs, and documenting findings with TTPs for executive stakeholders.

You will integrate classified threat intel into SIEM/SOAR platforms and collaborate with incident

Qualifications

• Active DoD Top Secret clearance required.
• DoD 8570 IAT Level II certification or higher.
• Ability to obtain CSSP-Analyst cert within 180 days of hire.
• Strong networking fundamentals and familiarity with threat indicators.
• Bachelor's degree plus 4+ years of relevant experience; military experience considered.

Responsibilities

• Investigate and triage security alerts from endpoints, IDS/IPS, and NetFlow.
• Conduct deep-dive analysis of highly-classified logs; correlate evidence for investigations.
• Produce detailed findings documenting adversary TTPs for stakeholders.
• Integrate classified threat intel into SIEM/SOAR platforms.
• Collaborate with incident response teams and communicate incidents to mission partners.

Skills

Active DoD clearance

IAT Level II

Threat hunting

SIEM/SOAR

Networking basics

Scripting (Python/PowerShell)

Education

Bachelor's degree with 4+ years experience

Tools

SIEM/SOAR platforms

Job description

Leidos is seeking a proactive Security Operations Center (SOC) Analyst to join our 24x7 front-line security operations team focused on protecting mission environments against sophisticated cyber threats. Responsibilities include investigating alerts from endpoints, IDS/IPS, and NetFlow, performing deep-dive analyses of classified logs, and documenting findings with TTPs for executive stakeholders.

You will integrate classified threat intel into SIEM/SOAR platforms and collaborate with incident