Cyber Network Defense Analyst

Description

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Leidos is seeking a Junior Cyber Network Defense Analyst to join our team supporting a high-visibility cybersecurity IDIQ contract. This program provides 24x7x365 Security Operations Center (SOC) support, cyber analysis, application development, and incident response for the Department of Homeland Security (DHS).

The DHS SOC is responsible for monitoring, detecting, analyzing, mitigating, and responding to cyber threats across the DHS Enterprise. Analysts coordinate detection and response activities across component SOCs using a shared incident tracking system and other communication tools.

The Monitoring and Analysis team operates on a 24x7 schedule across four shifts:

• Front Half (Day/Night): Sunday-Tuesday + alternating Wednesdays

• Back Half (Day/Night): Thursday-Saturday + alternating Wednesdays Candidates must be flexible to work non-core hours as needed.

• Monitor enterprise networks using SIEM tools

• Investigate alerts and document findings in Security Event Notifications (SENs)

• Analyze network traffic (PCAP, firewall, proxy, IDS logs, etc.)

• Collaborate with team members to assess threats

• Stay current on emerging threats and vulnerabilities

• Monitor shared inboxes for notifications and requests

• Use OSINT to support investigations

• Contribute to content tuning and detection improvements

Candidates must meet one of the following education and experience combinations:

• BS in IT, Cybersecurity, Data Science, Info Systems, or Computer Science + 2 years of experience.

• AS degree + 6 years of experience

• High School Diploma/GED + 8 years of experience

Relevant experience includes:

• Network Administration

• Unix/Linux Administration

• Software Engineering/Development

• Systems Administration

• Help Desk/IT Support

Additional requirements:

• TS/SCI clearance

• Entry on Duty (EOD) clearance

• At least one of the following certifications:

  • CompTIA: Security+, PenTest+, Cloud+, CySA+

  • SANS GIAC: GFACT, GCED, GSEC, GCIA, GDSA, GICSP, GCFA, GISF

  • EC Council: CEH

  • CISCO: CBROPS

  • CertNexus: CFR

  • Federal IT Security Institute: FITSP-O

• Familiarity with SOC methodologies and processes

• Understanding of network ports/protocols (TCP/UDP, HTTP, ICMP, DNS, SMTP)

• Knowledge of network topologies and security devices (Firewall, IDS/IPS, Proxy, DNS)

• Experience with packet analysis tools (e.g., Wireshark)

• Familiarity with malware, attack vectors, and Windows OS logging

• Experience with Antivirus, DLP, and host-based firewalls

• Scripting skills in Python, PowerShell, JavaScript, VBS, etc.

At Leidos, we don't want someone who "fits the mold"-we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, "what's next?" before the dust settles on "what's now."

If you're already scheming step 20 while everyone else is still debating step 2... good. You'll fit right in.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.