TS/SCI SOC Analyst — 24/7 Threat Defender

Leidos; Illinois; On-site; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking a proactive SOC Analyst to defend critical digital landscapes on a 24x7 front-line team. You will investigate alerts from endpoints, IDS/IPS, and NetFlow, and analyze highly-classified logs to support complex investigations against nation-state actors.

You will produce detailed findings on TTPs for stakeholders and integrate classified threat intel into SIEM sensors. A DoD TS clearance and DoD 8570 IAT II certification are required, with relocation considerations to Scott AFB,

Qualifications

• Active DoD Top Secret clearance required.
• DoD 8570 IAT Level II cert or higher (Security+ CE, SSCP, or SANS GSEC).
• Ability to obtain CSSP-Analyst within 180 days of hire.
• Bachelor's degree and 2+ years relevant experience; equivalent military experience considered.

Responsibilities

• Investigate and triage security alerts from endpoints, IDS/IPS, NetFlow, and sensors to neutralize threats.
• Perform deep-dive analysis of highly-classified logs, pivoting between datasets to support investigations against nation-state actors.
• Produce detailed findings and reports for stakeholders, documenting adversary TTPs.
• Integrate classified threat intel feeds and IOCs into sensors and SIEM platforms.
• Collaborate with incident response teams and communicate incidents to mission partners.

Skills

SOC Experience

Critical Thinking

Adversary Mindset

Self-Motivation

Change Adaptability

Stakeholder Communication

Education

Bachelor's degree

2+ years experience

Tools

SIEM platforms

IDS/IPS

NetFlow

Threat intel feeds

Job description

Leidos is seeking a proactive SOC Analyst to defend critical digital landscapes on a 24x7 front-line team. You will investigate alerts from endpoints, IDS/IPS, and NetFlow, and analyze highly-classified logs to support complex investigations against nation-state actors.

You will produce detailed findings on TTPs for stakeholders and integrate classified threat intel into SIEM sensors. A DoD TS clearance and DoD 8570 IAT II certification are required, with relocation considerations to Scott AFB,