Cloud Security Team Lead

Leidos•Whitehall, IL

1d•Hybrid

About The Position

Leidos is seeking a Cybersecurity Team Lead to direct a front-line team securing DoD multi-cloud (AWS, GCP, Oracle) and hybrid infrastructures. This is your opportunity to lead cybersecurity where it matters most, driving mission success and 24x7 operational readiness on major defense programs with a national impact. This position can sit in any of our three core sites - Columbus, OH; Scott AFB, IL; or Hill AFB, UT. We value our leaders as much as our mission. Built for experienced, people-first managers, this role empowers you to mentor emerging technical talent, direct advanced alert triage, and influence operational strategy with senior leadership. We support your career growth with structured training and professional development pathways, all while prioritizing your work-life balance through a stable, standard five-day, 8-hour shift schedule.

Requirements

Minimum active DoD Secret clearance, with eligibility to obtain a Top Secret (TS) clearance.
Current DoD 8570 IAT Level II certification or higher (e.g., CompTIA Security+ CE, ISC2 SSCP, SANS GSEC, or equivalent).
Ability to obtain a DoD 8570 CSSP-A Level Certification (e.g., CEH, CySA+, GCIA, or equivalent) within 180 days of hire.
A minimum of 2 years of formal management or equivalent team leadership experience.
Bachelor's degree in a related discipline as well as 8+ years of directly relevant experience. Military service and equivalent professional work experience are highly valued and may be considered in lieu of a degree.
Strong understanding of network traffic flow, packet analysis, ports, protocols, and defense-in-depth security.
Proven ability to collaborate effectively with cross-functional teams to tackle complex security challenges.
Must be able to translate deep technical data into concise communications, build consensus, and drive incident solutions to completion.
Highly reliable and flexible, demonstrating a strong work ethic whether working independently or leading collaborative team efforts on assigned shifts.
Passionate about staying ahead of emerging threats, demonstrated through the ongoing pursuit of certifications, self-study, or active participation in cybersecurity forums.
Within a 2-hour commute (or willing to relocate) to Hill AFB, UT; Scott AFB, IL; or Columbus, OH.

Nice To Haves

Prior experience working with DISA and/or DoD networks.
2+ years specifically managing cross-functional cybersecurity or SOC teams.
Operational mastery of enterprise-grade SIEM platforms (e.g., Splunk, Elastic, QRadar).
CCSP, CCSK, Cloud+, SANS GIAC (GCIA, GCIH, GLSC) or CompTIA CASP+.

Responsibilities

Direct a specialized team of 6-8 cybersecurity analysts, providing guidance and oversight across critical tasks.
Drive the analysis and correlation of real-time DoD and open-source intelligence feeds.
Guide the team in actively integrating threat intelligence (IOCs) into security sensors and enterprise SIEMs to intercept emerging threats.
Oversee the investigation of security alerts across complex networks.
Lead analysts in leveraging endpoint telemetry, IDS/IPS, NetFlow, VPC Flows, and raw packet data to rapidly detect and report suspicious actors.
Direct the analysis of extensive log files and security events across diverse, enterprise-scale multi-cloud environments (AWS, GCP, Oracle) to identify and prioritize suspicious behavior.
Partner with incident response teams and act as the key escalation point for customers and USCYBERCOM.
Author thorough investigation reports detailing incident findings.
Serve as the critical escalation point to customers and USCYBERCOM, ensuring a unified and timely response to critical security events.
Act as a core mentor and strategic leader for the Team.
Champion a positive, highly productive work culture through consistent employee engagement.
Actively support the team's professional growth by partnering with senior leadership to manage ongoing training, performance reviews, and career advancement pathways.
Serve as the operational bridge between analysts and the broader mission.
Maintain transparent, highly effective communication across the chain of command, civilian personnel, and external customers to ensure daily operational success.
Collaborate with senior leadership to clear operational roadblocks and align the team’s daily activities with long-term strategic goals.
Ensure organizational policies and leadership directives are implemented smoothly and consistently.