Cyber Security Analyst (SOC, Adelphi)

About the role

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch (DCSB) and protect critical Department of War networks, systems and data from sophisticated cyber threats. The analyst joins a high-visibility Security Operations Center (SOC) delivering 24x7x365 defensive cyber operations, including continuous monitoring, threat detection, incident response and vulnerability management. The team covers a multi-tenant environment on on-premises infrastructure and cloud platforms such as AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud and SaaS. The schedule is full time, day shift 6:00 am to 2:00 pm, hybrid with 3 days on site at Adelphi.

Key responsibilities

• Lead and coordinate investigations through the Incident Response lifecycle, from detection to remediation.
• Analyze security events, alerts, logs and network data to determine the scope and impact of incidents.
• Acquire and analyze endpoint and network artifacts, including NetFlow and full packet capture.
• Identify attacker TTPs and IOCs to strengthen detection and response.
• Tune and maintain SIEM and IDS technologies to reduce false positives.
• Maintain incident response processes, procedures, workflows and playbooks.
• Document investigations in case management systems and write clear incident reports.
• Collaborate with cyber professionals to defend the DoD Information Network against APT actors.

Required profile

• Bachelor's degree and 4-8 years of relevant cybersecurity experience.
• U.S. citizenship with an active TS/SCI clearance with SAP eligibility.
• Baseline certification (Security+ CE) and CSSP-Infrastructure Support certification at start.
• Ability to work the 6:00 am to 2:00 pm day shift and in a collaborative SOC environment.
• Preferred: experience across Protect, Detect, Respond and Sustain functions, a 24x7 SOC, the cyber kill chain, and strong communication skills.

Required skills

• Hands-on experience with an enterprise SIEM platform and analyzing large volumes of logs and NetFlow/packet capture data.
• Strong understanding of TCP/IP, the OSI model, network security and defense-in-depth.
• Understanding of cloud security concepts and familiarity with Unix-based systems.

Pay range: $87,100 - $157,450.