Weekend Cyber Defense Analyst – TS/SCI

Leidos; Suitland (MD); On-site; USD 87,000 - 157,000; Part time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Income Protection

Paid Leave and Retirement

Job summary

Leidos is hiring a Cyber Defense Analyst to join the ONI HGCC team in Suitland, MD. This part-time weekend role (about 24 hours per week) requires a training period with full-time day-shift hours for approximately the first eight weeks.

Post-training, you will support monitoring of security tools, analyze alerts for TS/SCI networks, perform threat hunting, and assist with incident tickets and briefings while maintaining an active TS/SCI clearance.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree in a cyber-related field or equivalent experience.
• 4+ years of relevant experience or Master’s with 2+ years.
• Experience monitoring alerts from cybersecurity tools.

Responsibilities

• Perform first line monitoring of security tools and analyze alerts for TS/SCI networks.
• Monitor cybersecurity tools for alerts, anomalies, and indicators of compromise.
• Investigate and perform initial technical analysis of cybersecurity alerts, escalate as needed.
• Create and manage incident tickets in the ticketing system.
• Conduct proactive threat hunting to identify malicious activity.
• Prepare and deliver operational and situational awareness briefings.

Skills

TS/SCI clearance

Cyber defense

SIEM experience

NIDPS knowledge

Scripting languages

Threat hunting

Incident handling

Problem solving

Education

Bachelor's degree in Cybersecurity/IT/Info Assurance

Master's degree in related field

Tools

Splunk

Elastic

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Kali

Burp Suite

Nmap

Metasploit

Job description

Leidos is hiring a Cyber Defense Analyst to join the ONI HGCC team in Suitland, MD. This part-time weekend role (about 24 hours per week) requires a training period with full-time day-shift hours for approximately the first eight weeks.

Post-training, you will support monitoring of security tools, analyze alerts for TS/SCI networks, perform threat hunting, and assist with incident tickets and briefings while maintaining an active TS/SCI clearance.