TS-Cleared SOC Analyst II: Advanced Threat Defender

Leidos Inc; Shiloh (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a proactive SOC Analyst for our 24x7 frontline security operations team to defend mission environments against sophisticated cyber threats. A TS clearance, DoD 8570 IAT II certification, and the ability to obtain CSSP-Analyst within 180 days are required.

Location is Scott AFB, IL, with a structured 5-day, 8-hour shift pattern. Responsibilities include alert triage, incident investigations, and clear reporting of TTPs.

Qualifications

• Active DoD Top Secret clearance.
• DoD 8570 IAT Level II certification or higher (e.g., Security+ CE, SSCP, or SANS GSEC).
• Ability to obtain DoD 8570 CSSP-Analyst certification within 180 days of hire.
• Strong networking fundamentals and defense-in-depth knowledge.
• Bachelor's degree plus 4+ years of relevant experience or equivalent.

Responsibilities

• Investigate and triage security alerts from endpoints, IDS/IPS, NetFlow, and custom sensors to identify and neutralize threats.
• Perform deep-dive analysis of highly-classified logs and correlate evidence for incident investigations against nation-state actors.
• Produce detailed technical findings and reports on adversary TTPs for stakeholders.
• Integrate classified threat intel feeds and IOCs into sensors and SIEM platforms.
• Collaborate with incident response teams and communicate security incidents to mission partners.

Skills

SOC experience

Critical thinking

Adversary mindset

Self-motivation

Change adaptability

Threat hunting

Education

Bachelor's degree

Tools

SIEM/SOAR

Packet analysis

Threat intel feeds

Job description

Leidos is seeking a proactive SOC Analyst for our 24x7 frontline security operations team to defend mission environments against sophisticated cyber threats. A TS clearance, DoD 8570 IAT II certification, and the ability to obtain CSSP-Analyst within 180 days are required.

Location is Scott AFB, IL, with a structured 5-day, 8-hour shift pattern. Responsibilities include alert triage, incident investigations, and clear reporting of TTPs.