Cyber Security Analyst (SOC, Swing Shift)

About the role

Leidos is seeking a Cyber Security Analyst to support the C5ISR Defensive Cyber Solutions Branch and protect critical Department of War networks, systems and data from sophisticated cyber threats. The role sits in a high-visibility Security Operations Center (SOC) delivering 24x7x365 defensive cyber operations, including continuous monitoring, threat detection, incident response and vulnerability management. The team covers a multi-tenant environment on on-premises infrastructure and cloud platforms such as AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud and SaaS. The position is hybrid (3 days on site in Adelphi), full time, swing shift 2:00 p.m. to 10:00 p.m., and requires U.S. citizenship with an active TS/SCI clearance with SAP eligibility.

Key responsibilities

• Lead and coordinate investigations through the incident response lifecycle, from detection to remediation.
• Analyze security events, alerts, logs and network data to determine the scope and impact of incidents.
• Acquire and analyze endpoint and network artifacts, including NetFlow and full packet capture.
• Identify attacker TTPs and IOCs to strengthen detection and response.
• Tune and maintain SIEM and IDS tools to reduce false positives.
• Maintain incident response processes, procedures, workflows and playbooks.
• Document investigations in case management systems and write clear incident reports.
• Work with cyber professionals to defend the DoD Information Network against APT actors.

Required profile

• Bachelor's degree and 4-8 years of relevant cybersecurity experience.
• Baseline certification (Security+ CE) and CSSP-Infrastructure Support certification at start.
• U.S. citizenship with an active TS/SCI clearance with SAP eligibility.
• Ability to work the 2:00 p.m.-10:00 p.m. swing shift and in a collaborative SOC environment.
• Preferred: experience across protect, detect, respond and sustain functions, in a 24x7 SOC, and with threat frameworks such as the Cyber Kill Chain.

Required skills

• Hands-on experience with an enterprise SIEM platform and analyzing large volumes of security logs and NetFlow/packet capture.
• Strong understanding of TCP/IP, the OSI model, network security and defense-in-depth.
• Understanding of cloud security concepts and familiarity with Unix-based systems.

Pay range: $87,100 - $157,450.