Senior DCO Analyst

Leidos•Odenton, MD

About The Position

Leidos’ Digital Modernization Sector is hiring a Senior Defensive Cyber Operations (DCO) Analyst for the GSM-O II program, supporting the DISA Joint Operations Center (D2OC) at Fort Meade, Maryland. GSM-O II supports current operations, command and control, and defensive cyber operations across Combatant Commands, Service Cyber Components, agencies, and field activities, including continuous coordination with USCYBERCOM and partner agencies. The analyst will conduct continuous network monitoring and incident handling, support threat-informed vulnerability assessment and mitigation, coordinate operational orders, and provide technical analysis and recommendations to mission partners and senior leadership. The role requires an active DoD TS/SCI clearance and a DoD-8140 WRC 511 Intermediate certification at the time of starting.

Requirements

Bachelor’s degree in a related discipline and 8 or more years of applicable combined education and experience; additional related experience may substitute for a degree.
Active DoD TS/SCI clearance.
DoD-8140 WRC 511 Intermediate certification required to start. Acceptable certifications listed include CEH(P), GMON, GRID, Cloud+, FITSP-O, GCED, GDSA, GSEC, PenTest+, and Security+.
Experience with SIEM tools such as ArcSight, Splunk, or Elastic.
Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies (TTPs).
Computer Network Defense experience within a Computer Incident Response organization, covering Protect, Detect, Respond, and Sustain.
Deep understanding of cyber security principles, theories, and concepts, and ability to apply them.
Ability to work independently and as part of a team to develop solutions to unclear issues requiring deep technical knowledge.

Nice To Haves

Experience with DISA/DCDC and DoD networks.
Knowledge of the DoD orders process.
Demonstrated experience briefing Senior Executive Service and General Officer/Flag Officer leadership.
Experience building extended cyber security analytics.
Understanding of network threat and attack life cycles, attack vectors, exploitation methods, and intelligence-driven defense and/or Cyber Kill Chain methodology.
Experience with User Acceptance Testing (UAT).

Responsibilities

Execute continuous network monitoring and incident handling/problem resolution.
Triage events and incidents and help develop area-of-operations-specific trends.
Support collaborative, cross-functional forums covering intelligence, current operations, future operations, logistics, planning, resourcing, and requirements to advance coordinated, threat-informed vulnerability scoring and mitigation.
Support the development, coordination, release, and compliance of orders.
Provide threat analysis, track prioritized incidents, and develop recommendations in coordination with the Cross Functional Fusion Team.
Use intelligence and operational data, information, and processes to identify threats, improve security, and reduce enterprise exposure to vulnerabilities.
Identify problems and assess the accuracy and relevance of technical information.
Use sound judgment to develop, evaluate, and execute alternative courses of action.
Produce timely, effective, decision-quality technical recommendations for senior leadership.
Engage with customers and mission partners, anticipate their needs, and deliver mission support.