Cyber Fusion and Threats Analyst

Leidos • Odenton, MD

11d • $107,900 - $195,050 • Onsite

About The Position

Leidos Digital Sector is hiring a Cyber Fusion and Threats Analyst for its GSM-O II DISA Command Comprehensive Support Services (DCCSS) program. The role supports 24x7 operations at the DISA Joint Operations Center (D2OC) at Ft. Meade, Maryland. GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA), the Department of War (DoW), and Combatant Commands (CoCOMs).

The analyst monitors cyber activity by reviewing Department of Defense, Intelligence Community, and open-source reporting for vulnerabilities, malware, and other threats that could affect the DoD Information Network (DoDIN). The role supports mission-critical Continuity of Operations (COOP), produces and shares analysis and incident communications, and contributes threat and vulnerability analysis, security recommendations, and team training.

Requirements

• Bachelor's degree and 8 or more years of professional experience; related DISA experience and cyber courses or certifications may be accepted in lieu of a degree.
• DoD-8140 IAT Level 2 baseline certification (Security+ CE or higher) required at the start date.
• Proficient understanding of Cyber Network Defense (CND), including protect, detect, respond, and sustain functions within a Computer Incident Response organization.
• Excellent verbal and written communication skills, including the ability to articulate technical and strategic cyber matters to varied audiences.
• Highly developed research and analytical skills to identify statistically significant patterns related to cyber threats.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, the OSI model, and defense-in-depth.
• Active Top Secret/SCI clearance.

Nice To Haves

• Knowledge of cloud security and defense.
• Experience with DISA and DoD networks.
• Working knowledge of cyber operational security, log analysis, NetFlow analysis, incident response, malware analysis, computer forensics, and/or cyber-crime.
• Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP, or CASP.
• Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Working knowledge and proficiency with Wireshark and Splunk analysis tools.
• Experience in intelligence-driven defense and/or Cyber Kill Chain (CKC) methodology, and knowledge of Advanced Persistent Threat (APT) and other cyber threat modeling frameworks.
• Working knowledge of the U.S. Intelligence Community and/or fusion centers.

Responsibilities

• Maintain awareness of cyber activity by reviewing DoD, Intelligence Community, and open-source reporting for vulnerabilities, malware, and other threats that could impact the DoDIN.
• Support mission-critical Continuity of Operations (COOP).
• Synthesize, summarize, consolidate, and share potentially malicious DoDIN activity with DISA and mission partner organizations.
• Create incident reports, wiki updates, collaboration/chat tippers and notifications, DoD incident handling database queries, metrics, and trend reports.
• Assist with threat and vulnerability analysis and provide security advisory services and recommendations.
• Train and mentor other team members.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior