Cyber Fusion and Threats Analyst

Leidos • Odenton, MD

8d • Onsite

About The Position

The Leidos Digital Sector is hiring a Cyber Fusion and Threats Analyst for the GSM-O II DISA Command Comprehensive Support Services (DCCSS) program. The role supports 24x7 operations at the DISA Joint Operations Center (D2OC) at Ft. Meade, Maryland. GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency in support of the Department of War and Combatant Commands.

The analyst maintains awareness of cyber activity and potential threats to the DoD Information Network (DoDIN), helps sustain mission-critical Continuity of Operations, and shares analysis with DISA and mission partners. The position also includes threat and vulnerability analysis, security advisory support, and training and mentoring team members.

Requirements

• Bachelor's degree and 8 or more years of professional experience; related DISA experience and cyber courses or certifications may be accepted in lieu of a degree.
• DoD-8140 IAT Level 2 baseline certification, such as Security+ CE or higher, required at start date.
• Proficient understanding of Cyber Network Defense (CND), including protect, detect, respond, and sustain functions in a Computer Incident Response organization.
• Excellent verbal and written communication skills, including the ability to explain technical and strategic cyber matters to varied audiences.
• Highly developed research and analytical skills to identify statistically significant patterns related to cyber threats.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, the OSI model, and defense-in-depth.
• Active Top Secret/SCI clearance.

Nice To Haves

• Knowledge of cloud security and defense.
• Experience with DISA and DoD networks.
• Working knowledge of cyber operational security, log analysis, netflow analysis, incident response, malware analysis, computer forensics, and/or cyber-crime.
• Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP, or CASP.
• Experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Working knowledge and proficiency with Wireshark and Splunk analysis tools.
• Experience in intelligence-driven defense and/or Cyber Kill Chain (CKC) methodology; knowledge of Advanced Persistent Threat (APT) and other cyber threat modeling frameworks.
• Working knowledge of the U.S. Intelligence Community and/or fusion centers.

Responsibilities

• Review DoD, Intelligence Community, and open-source reporting for vulnerabilities, malware, and other threats that could affect the DoDIN.
• Support mission-critical Continuity of Operations (COOP).
• Synthesize, summarize, consolidate, and share potentially malicious DoDIN activity with DISA and mission partner organizations.
• Create incident reports, wiki updates, collaboration/chat tippers and notifications, DoD incident-handling database queries, metrics, and trend reports.
• Assist with threat and vulnerability analysis and provide security advisory services and recommendations.
• Train and mentor other team members.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior