Threat Intel & Fusion Analyst — Hybrid DCO Specialist

Leidos LLC; Washington; Hybrid; USD 87,000 - 157,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Leidos is seeking Cyber Analysts to join the Defensive Cyber Operations team in Washington, DC, hybrid with up to 20% telework. Responsibilities span threat hunting, threat intelligence, and cyber fusion to protect federal networks. Roles support 24/7 coverage with on-site emphasis and potential weekend work.

Positions expected in Winter/Spring 2027. Required clearances including DoD TS/SCI and DoD 8570 IAT Level II+; advanced degrees and DoD certs are considered to start.

Qualifications

• DoD TS/SCI clearance and ability to pass customer screening.
• Bachelor’s degree (4+ years) or Master’s degree (2+ years) in a related discipline.
• DoD 8570 IAT Level II or higher to start.

Responsibilities

• Threat Hunting: develop campaigns based on adversary TTPs.
• Query telemetry across cloud, identity, and network to surface attacks.
• Convert hunt findings into automated SIEM/EDR detection rules.
• Author Fusion Reports blending forensics and strategic intelligence.

Skills

SPL

KQL

Elastic DSL

Python

PowerShell

Bash

AWS

Azure

O365

MITRE ATT&CK

Cyber Kill Chain

Diamond Model of Intrusion

DFIR

Threat Intelligence Platforms

AI analytics

Analytical writing

Education

Bachelor’s degree in a related discipline

Master’s degree in a related discipline

Tools

Anomali

ThreatConnect

MISP

Job description

Leidos is seeking Cyber Analysts to join the Defensive Cyber Operations team in Washington, DC, hybrid with up to 20% telework. Responsibilities span threat hunting, threat intelligence, and cyber fusion to protect federal networks. Roles support 24/7 coverage with on-site emphasis and potential weekend work.

Positions expected in Winter/Spring 2027. Required clearances including DoD TS/SCI and DoD 8570 IAT Level II+; advanced degrees and DoD certs are considered to start.