Cyber Analytics Team Lead

Leidos•Seaside, VA

9d•Hybrid

About The Position

Leidos is seeking an experienced cybersecurity professional to serve as the Cyber Analysis Lead supporting the Defense Manpower Data Center (DMDC) and the Defense Human Resources Activity (DHRA) within the Office of the Under Secretary of Defense for Personnel & Readiness (OUSD P&R). This Key Personnel position provides technical leadership for cyber analysis activities supporting one of the Department of Defense's most critical information environments. DMDC maintains the Department's largest centralized repository of personnel, manpower, identity, readiness, pay, casualty, personnel security, entitlement, and financial information. The Cyber Analysis Lead will direct the team responsible for identifying cyber threats, analyzing vulnerabilities, assessing enterprise risk, and developing actionable mitigation recommendations that strengthen the organization's overall cybersecurity posture. The selected candidate will lead cyber analysis activities supporting a complex enterprise environment that includes approximately 15,000 network and endpoint devices, over 600 Government applications, approximately 100 Risk Management Framework (RMF) authorization boundaries, hybrid cloud environments, globally distributed infrastructure, and multiple cybersecurity service providers supporting worldwide operations. This role requires a technical leader capable of translating cyber threat intelligence, vulnerability analysis, and operational data into meaningful risk reduction strategies that improve enterprise security while supporting mission operations. Mission Environment The Cyber Analysis Lead provides technical leadership supporting cybersecurity operations across a diverse enterprise consisting of: Approximately 15,000 network and endpoint devices. More than 600 Government-owned applications supporting DoD missions. Approximately 100 Risk Management Framework (RMF) authorization boundaries. Hybrid cloud environments including Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), Software-as-a-Service (SaaS), and DISA-hosted capabilities. Worldwide enterprise infrastructure supporting personnel, identity, readiness, and mission support operations. Multiple Cybersecurity Service Providers (CSSPs). Government and contractor-operated environments requiring close coordination between cybersecurity, IT operations, and mission stakeholders.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline with 10 years of progressively responsible experience in cybersecurity operations, cyber analysis, threat intelligence, vulnerability management, or cyber defense. Additional relevant experience may be considered in lieu of a degree in accordance with Leidos equivalency guidelines.
Demonstrated experience leading cyber analysis, threat intelligence, vulnerability assessment, or cyber defense teams.
Experience identifying, assessing, and prioritizing cybersecurity risks within large enterprise environments.
Experience developing risk-based mitigation recommendations for technical and executive stakeholders.
Strong understanding of enterprise security monitoring, threat intelligence, vulnerability management, SIEM technologies, and cyber defense operations.
Demonstrated ability to communicate complex technical findings to Government leadership and executive stakeholders.
Active Secret Security Clearance with the ability to maintain the required clearance.
Ability to satisfy applicable DoD 8140 certification requirements for the assigned work role.
Experience aligned with DoD Cyber Workforce Framework (DCWF) Work Role 443 – Network Analyst (Advanced).
Ability to support onsite operations at the Government's Mark Center (Alexandria, VA) or DoD Center–Monterey Bay (Seaside, CA) in accordance with contract requirements.

Nice To Haves

Previous experience supporting the Defense Manpower Data Center (DMDC), Defense Human Resources Activity (DHRA), or other Department of Defense organizations.
Experience conducting enterprise threat intelligence analysis and cyber risk assessments in Federal or DoD environments.
Experience operating within hybrid enterprise environments spanning on-premises infrastructure, Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), and Software-as-a-Service (SaaS) platforms.
Familiarity with MITRE ATT&CK, Cyber Kill Chain, threat hunting methodologies, and advanced threat analysis techniques.
Experience with vulnerability management platforms, security analytics, and cyber reporting tools.
Working knowledge of the Risk Management Framework (RMF), eMASS, continuous monitoring, and enterprise cybersecurity compliance.
Professional cybersecurity certifications such as CISSP, GSEC, CySA+, CASP+, GCIH, GCIA, or equivalent.
Excellent written and verbal communication skills with demonstrated experience briefing technical teams, program leadership, executive management, and Government customers.
Demonstrated success leading technical teams, improving analytical processes, and driving enterprise cybersecurity initiatives.

Responsibilities

Lead and direct a team of cyber analysts responsible for identifying, analyzing, and mitigating cyber threats and vulnerabilities.
Develop and implement enterprise security monitoring strategies and analytical methodologies that strengthen the organization's cybersecurity posture.
Lead threat intelligence analysis, vulnerability assessments, and cyber risk evaluations across enterprise environments.
Develop actionable, risk-based mitigation recommendations that enable informed decision-making and improve defensive capabilities.
Coordinate with Government stakeholders, SOC personnel, and technical teams to support proactive cyber defense operations.
Mentor and develop cyber analysts, fostering technical growth and analytical excellence.
Analyze threat intelligence, security events, and vulnerability data to identify trends, emerging threats, and opportunities for risk reduction.
Support continuous improvement of analytical processes, reporting methodologies, and cyber assessment capabilities.
Ensure analytical activities align with DoD cybersecurity policies, Risk Management Framework (RMF) guidance, and industry best practices.
Prepare and present analytical findings, cybersecurity assessments, and recommendations to Government leadership and program stakeholders.