Cyber Risk Analyst

Leidos•Gaithersburg, MD

1d•$57,850 - $104,575•Hybrid

About The Position

The Civil Group at Leidos is hiring an entry-level Cyber Risk Analyst to support cybersecurity and risk management activities from its Gaithersburg, Maryland office, with opportunities for telework. The role supports vulnerability management, continuous monitoring, information assurance, security documentation, and incident response across cloud and enterprise environments. The analyst works with technical and non-technical teams to help maintain compliance with federal cybersecurity requirements and strengthen the security posture of supported systems.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, with relevant hands-on experience.
Ability to obtain and maintain a Public Trust clearance.
Must be located in or within commuting distance of Gaithersburg, Maryland.
Understanding of cybersecurity concepts, vulnerability management, and information assurance principles.
Ability to work effectively in a dynamic, collaborative environment with multiple functional teams.
Strong written and verbal communication skills, including the ability to communicate with technical and non-technical users.
Ability to independently organize and manage day-to-day priorities while supporting overall program objectives.
Strong analytical, problem-solving, and troubleshooting skills.

Nice To Haves

Cybersecurity-related certifications such as Azure Cybersecurity Architect, CISSP, or similar industry-recognized certifications.
Familiarity with NIST RMF, continuous monitoring, vulnerability management, and federal cybersecurity requirements.
Experience or familiarity with cloud security environments.
Understanding of DevSecOps principles and secure agile development practices.
Familiarity with development and configuration languages such as YAML, Python, and JSON.
Exposure to threat hunting, incident response, security automation, or cyber intelligence analysis.

Responsibilities

Perform vulnerability assessments, including security scans, analysis of scan results, and documentation of findings.
Document vulnerabilities and assessment results in accordance with NIST Risk Management Framework (RMF) processes.
Support continuous monitoring across multiple cloud environments and computing platforms.
Monitor and manage audit trail logs, security scans, and related security data.
Help ensure systems comply with established security policies, procedures, and requirements.
Support cybersecurity reporting to program and management teams.
Participate in security assessments and help develop and maintain system security documentation.
Support implementation and verification of information system security requirements.
Analyze cyber intelligence data and assist with security incident investigations.
Perform threat hunting within supported operating environments.
Maintain awareness of evolving cybersecurity architectures, federal security regulations, and security benchmarks.
Support implementation and maintenance of automated responses to security events and incidents.
Work with development teams to support DevSecOps practices in agile development environments.
Continuously learn and adapt to changes in security technologies, regulations, and program requirements.