Cyber Risk Analyst

Leidos•Gaithersburg, MD

15h•Hybrid

About The Position

The Civil Group at Leidos is hiring an entry-level Cyber Risk Analyst to support cybersecurity and risk management across cloud and enterprise environments. The role is based at the Gaithersburg, Maryland office, with opportunities for telework. The analyst will work with technical and non-technical teams to help maintain compliance with federal cybersecurity requirements and strengthen the security posture of supported systems. The position supports vulnerability management, continuous monitoring, information assurance, security documentation, and incident response. It includes conducting and documenting assessments under NIST Risk Management Framework processes, supporting security controls and compliance, analyzing cyber intelligence, assisting with incident investigations, and contributing to threat hunting and DevSecOps practices. The analyst is expected to adapt to changing security technologies, regulations, and program requirements.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field with relevant hands-on experience.
Must be able to obtain and maintain a Public Trust clearance.
Must be located in or within commuting distance of the Gaithersburg, Maryland area.
Understanding of cybersecurity concepts, vulnerability management, and information assurance principles.
Ability to work effectively in a dynamic, collaborative environment with multiple functional teams.
Strong written and verbal communication skills, including the ability to communicate with technical and non-technical users.
Ability to organize and manage day-to-day priorities independently while supporting program objectives.
Strong analytical, problem-solving, and troubleshooting skills.

Nice To Haves

Cybersecurity-related certifications such as Azure Cybersecurity Architect, CISSP, or similar industry-recognized certifications.
Familiarity with NIST RMF, continuous monitoring, vulnerability management, and federal cybersecurity requirements.
Experience or familiarity with cloud security environments.
Understanding of DevSecOps principles and secure agile development practices.
Familiarity with development and configuration languages such as YAML, Python, and JSON.
Exposure to threat hunting, incident response, security automation, or cyber intelligence analysis.

Responsibilities

Perform vulnerability assessments, including security scans, analysis of scan results, and documentation of findings.
Document vulnerabilities and assessment results in accordance with NIST Risk Management Framework processes.
Support continuous monitoring across multiple cloud environments and computing platforms.
Monitor and manage audit trail logs, security scans, and related security data.
Help ensure systems comply with established security policies, procedures, and requirements.
Support cybersecurity reporting to program and management teams.
Participate in security assessments and help develop and maintain system security documentation.
Support implementation and verification of information system security requirements.
Analyze cyber intelligence data and assist with security incident investigations.
Perform threat hunting within supported operating environments.
Maintain awareness of cybersecurity architectures, federal security regulations, and security benchmarks.
Support implementation and maintenance of automated responses to security events and incidents.
Work with development teams to support DevSecOps practices in agile development environments.
Continuously learn and adapt to changes in security technologies, regulations, and program requirements.