TS/SCI Cyber Defense Mission Lead

Leidos; Shiloh (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a seasoned cyber defense team leader to supervise monitoring, triage, and incident response within classified environments. You will coordinate cross-functional analysts, ensure policy compliance, and drive rapid containment actions under DoD reporting standards.

The role requires active TS/SCI clearance, DoD 8570 IAT II, and experience with SIEMs on secure networks. Expect 5x8 on-site shifts supporting mission-critical operations.

Qualifications

• Active DoD Top Secret / SCI clearance
• DoD 8570/8140 IAT Level II baseline certification (Security+ CE, SSCP, GSEC, CySA+)
• CSSP-A or CSSP-IR certification (e.g., CySA+, CEH, GCIA, GCIH) or ability to obtain within 180 days of hire
• Foundational knowledge of TCP/IP networking, packet analysis, OSI model, defense-in-depth

Responsibilities

• Lead analysts in evaluating alerts from endpoints, IDS/IPS, NetFlow, and custom network sensors across classified enclaves
• Produce detailed Cyber Incident Reports (CIR) and integrate threat intel into SIEM platforms
• Coordinate incident response with customer leadership and DoD reporting standards

Skills

Cyber operations

Incident response

Team leadership

Threat analysis

Communication

Education

Bachelor’s degree + 4 years cyber defense/SOC

Bachelor’s degree + 8 years cyber defense/SOC

Tools

Splunk

Elastic

Sentinel

Wireshark

tcpdump

Job description

Leidos is seeking a seasoned cyber defense team leader to supervise monitoring, triage, and incident response within classified environments. You will coordinate cross-functional analysts, ensure policy compliance, and drive rapid containment actions under DoD reporting standards.

The role requires active TS/SCI clearance, DoD 8570 IAT II, and experience with SIEMs on secure networks. Expect 5x8 on-site shifts supporting mission-critical operations.