Weekend Cyber Defense Analyst - Part Time TS/SCI

Leidos; Suitland (MD); On-site; USD 90,000 - 157,000; Part time

Job summary

Leidos is seeking a part-time Cyber Defense Analyst for weekend day shifts in Suitland, MD, supporting the Navy's cybersecurity environment at HGCC. You will monitor alerts, perform initial analysis, and assist in threat hunting and incident management for TS/SCI networks, including JWICS and ATLAS.

The role requires experience with SIEM tools, NIDPS, scripting, and knowledge of penetration testing techniques.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field with 4+ years of experience or Master’s with 2+ years.
• Active TS/SCI security clearance.
• Concentrated experience in CND discipline.
• Experience monitoring and investigating alerts from cybersecurity tools.
• Experience with SIEM systems such as Splunk and Elastic.
• Experience with NIDPS and host-based tools.
• Knowledge of scripting languages (Python, PowerShell, etc.).
• Knowledge of penetration testing and red team tools.

Responsibilities

• Monitor security tools for TS/SCI networks (JWICS, ATLAS, HGCC)
• Investigate alerts and perform initial technical analysis
• Escalate incidents to Tier 2 as needed
• Create and manage incident tickets
• Conduct proactive threat hunting
• Perform wireless security scans and document findings
• Correlate alerts across platforms to identify trends
• Deliver operational and situational awareness briefings
• Support annual cyber defense exercises

Skills

SIEM analytics

Threat hunting

Incident management

Python/PowerShell scripting

Red/blue team concepts

Security program analysis

Education

Bachelor's degree in Cybersecurity/Information Technology

Master’s degree in related field

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Job description

Leidos is seeking a part-time Cyber Defense Analyst for weekend day shifts in Suitland, MD, supporting the Navy's cybersecurity environment at HGCC. You will monitor alerts, perform initial analysis, and assist in threat hunting and incident management for TS/SCI networks, including JWICS and ATLAS.

The role requires experience with SIEM tools, NIDPS, scripting, and knowledge of penetration testing techniques.