Threat Intelligence Platform Integrations Lead

Leidos Inc; Whitehall (OH); Híbrido; USD 87.000 - 157.000; Jornada completa

Descripción de la vacante

Leidos' Digital Modernization sector is seeking a Threat Intelligence Platform Integrations SME to act as mission owner for our CTI fusion and blocking capabilities. The role supports sustained platform integration across DISA solutions and DoWIN, with a focus on actionable threat intelligence analysis.

The position requires a TS/SCI clearance, a related bachelor's degree with 4+ years of experience, and hands-on work with TIPs, threat feeds, and security integrations such as CBII, Palo Alto,

Formación

• Active TS/SCI clearance is required.
• Bachelor's degree in a related discipline plus 4+ years of directly relevant experience; additional related years accepted in lieu of a degree.
• 2+ years of experience with Threat Intelligence Platforms (TIPs) and configuring threat feed integrations.
• Proficiency in Python programming.
• Experience editing configurations with JSON and YAML.
• Experience with version control systems such as Git.
• Applied knowledge of security solutions and their integrations in enterprise environments (CBII, Palo Alto, ERS, Versa).
• 8140 Cyber Defense Infrastructure Support Specialist 521 (CS) intermediate-level compliance with one of Security+, PenTest+, CySA+, GSEC, or GMON.

Responsabilidades

• Act as the mission owner for sustained Threat Intelligence Platform support.
• Drive CTI fusion, low-regret model scoring, and integration of blocking capabilities.
• Integrate threat feeds across DISA capabilities (CBII, Palo Alto, ERS, Versa).
• Integrate block lists to support automated defensive solutions (Bladeguard).
• Fuse multiple intelligence sources to develop comprehensive threat products and recommendations.
• Research threats and map adversary activity using MITRE ATT&CK framework.
• Produce papers and briefings for senior U.S. government officials.
• Support IOC management, blocking, and troubleshooting for government and CSWOs.

Conocimientos

Python

JSON

YAML

Git

TIPs

CTI fusion

Educación

Bachelor's degree in related discipline

Herramientas

CBII

Palo Alto

ERS

Versa

Bladeguard

Descripción del empleo

Leidos' Digital Modernization sector is seeking a Threat Intelligence Platform Integrations SME to act as mission owner for our CTI fusion and blocking capabilities. The role supports sustained platform integration across DISA solutions and DoWIN, with a focus on actionable threat intelligence analysis.

The position requires a TS/SCI clearance, a related bachelor's degree with 4+ years of experience, and hands-on work with TIPs, threat feeds, and security integrations such as CBII, Palo Alto,