Cyber Security Watch Officer

Leidos•Washington DC, DC

1d•Onsite

About The Position

Leidos' Digital Modernization sector is seeking a Cyber Security Watch Officer (CSWO) to join the GSM-O effort at the Pentagon. Applicants must have a minimum Secret clearance with ability to obtain TS/SCI and must be available for shift work (including weekends), which may vary based on program needs and manning levels. We support 24/7 operations and while shift assignments are usually static, they are based on both preference and contract requirements, so we ask our team members to remain flexible to potential shift modifications to meet minimum staffing requirements. All new hires will spend a brief ramp-up period on weekday day shift to start. Through the J6 Penetration Handling, Incident, System Health (PHISH) support services task order on the GSM-O contract, we provide IT products, services and solutions to the Pentagon and other DoD offices and agencies for them to meet mission and business requirements. Our CSWOs are principally engaged in the triage of events, cyber incident handling, network analysis and threat detection, trend analysis, metric development, vulnerability information dissemination, and the DoD Cyber Security Service Provider (CSSP) methodology. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Requirements

Must have, at minimum, an active DoD Secret security clearance with ability to obtain TS/SCI (active TS/SCI preferred)
Must have DoD 8570 IAT II or higher certification (Security+ CE or equivalent) prior to start.
Bachelor's degree and 3+ years of professional experience; additional military or relevant work experience may be considered lieu of a degree.
CND experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.
Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intelligence driven defense and/or Cyber Kill Chain methodology.
Experience in a 24x7 environment.

Nice To Haves

active TS/SCI preferred

Responsibilities

Support the Joint Network Operation and Support Center (JNOSC) Battle Captain and Cyber Center Security Chief with all cyber defense and network assurance issues.
Oversee all network defense operations, and be familiar with the operations process flow and execution.
Maintain awareness of all pertinent directives, orders, alerts, and messages; prepare and deliver daily situational awareness and operational update briefings.
Serve as Defensive Cybersecurity SME during 24x7 operations.