Leidos is hiring a Defensive Cybersecurity Analyst to support a 24x7 SOC mission focused on protecting DoD networks from sophisticated, evolving threats. In this onsite role at Scott AFB, IL, you will triage and investigate security alerts, enrich detections with threat intelligence, and coordinate with incident response partners to help ensure timely, accurate incident communication to customers and USCYBERCOM.
You will work across multiple detection sources, analyze extensive logs, and correlate evidence to produce detailed technical findings and reports. The position operates with defined coverage windows and expects flexibility to meet critical program requirements.
Responsibilities
- Investigate and triage security alerts from endpoints, IDS/IPS, NetFlow data, and custom sensors to identify suspicious activity.
- Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations while producing detailed technical findings and reports.
- Monitor and integrate DoD and open-source threat intelligence feeds and Indicators of Compromise (IOCs) into security sensors and SIEM platforms.
- Collaborate with incident response teams and ensure timely, clear communication of security incidents to customers and USCYBERCOM.
Requirements
- Active DoD Secret clearance, with the ability to obtain and maintain a TS/SCI.
- Current DoD 8570 IAT Level II (or higher) certification, such as CompTIA Security+ CE, ISC2 SSCP, or SANS GSEC (or equivalent 8140 requirements).
- Ability to obtain a DoD 8570 CSSP-Analyst level certification (for example, CEH, CySA+, GCIA, or equivalent) within 180 days of hire.
- Solid networking foundation, including packet analysis, common ports and protocols, traffic flow, OSI model, and defense-in-depth architecture.
- Level I: Bachelor's degree and 2+ years of relevant experience (equivalent professional work or military experience may be considered in lieu of a degree).
- Level II: Bachelor's degree and 4+ years of relevant experience (equivalent professional work or military experience may be considered in lieu of a degree).
- Location: Commutable distance (within 2 hours) or ability to self-relocate to Scott AFB, IL.
Technologies
- IDS/IPS, NetFlow, SIEM
- MITRE ATT&CK, Cyber Kill Chain
- AWS, Azure, GCP
- MDM, MAM, MTD
- CompTIA Security+ CE, ISC2 SSCP, SANS GSEC
- CEH, CySA+, GCIA
Shift & Operational Requirements
- Predictable five-day, 8-hour shift structure.
- Key coverage windows include: Day Shift: 8:00 AM - 4:00 PM; Swing Shift: 4:00 PM - 12:00 AM; Mid Shift: 12:00 AM - 8:00 AM.
- Flexibility to make every effort to honor shift preferences when possible, with final assignments ensuring critical program requirements are met.
Key Skillsets
- SOC Experience: understands 24x7 Security Operations Center operational flow, high tempo demands, and structured incident triage and escalation protocols.
- Critical Thinking & Adversary Mindset: correlates disparate data points, analyzes raw packet data, and conducts deep-dive investigations of complex security events.
- Demonstrated Self-Motivation: actively pursues professional development, including advanced certifications and research into emerging threat vectors and new tools.
- Thrives on Change: adapts to new processes, security tools, and analytical methodologies to respond to evolving adversaries or challenges.
Preferred Qualifications
- Prior experience working within DISA or DoD environments.
- Experience applying intelligence-driven defense strategies using MITRE ATT&CK or Cyber Kill Chain, including deep understanding of intrusion set tactics, techniques, and procedures (TTPs).
- In-depth experience using SIEM/SOAR platforms for behavioral and statistical analysis across multiple log types.
- Knowledge or experience defending cloud environments (AWS, Azure, GCP) or administering enterprise mobile security (MDM, MAM, MTD).
- Basic scripting and programming skills to automate routine analytical tasks.
Benefits
- Health and Wellness programs
- Income Protection
- Paid Leave
- Retirement
Pay & Range
Salary: USD 69,550 - 125,725 per yearly.
Location: Scott AFB, IL (onsite)
Minimum Experience: 2 years
Education: Bachelor's degree
Original Posting: August 29, 2026
