Cyber Defense Analyst

Leidos

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Suitland, MD
Salary: $87,100–$157,450 / yr
Employment: Full-time
Posted: 7 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $138k

This role $122k

$77k $178k

below market most similar roles pay here above market

This role pays less than 60% of similar roles. Most pay $113,700–$162,000 — the blue band above. At the midpoint, this role pays about $122k versus about $138k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 399 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 331 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Cyber Defense Analyst

Role Posting Log in to save

The Cyber Defense Analyst joins a mission-focused team supporting the Navy's cybersecurity environment at the Office of Naval Intelligence Hopper Global Communications Center. Working on the front line of cyber defense, the analyst monitors and investigates cybersecurity alerts to protect critical TS/SCI networks, including JWICS and ATLAS. Day-to-day responsibilities include performing initial technical analysis of security events, managing incident tickets, conducting proactive threat hunting, and performing wireless security scans. The role requires expertise in the Computer Network Defense discipline using SIEM systems like Splunk and Elastic, as well as NIDPS tools such as Cisco FirePower and Palo Alto NGFW. Candidates must also possess knowledge of host-based tools like Trellix ePO and Microsoft Defender, along with scripting languages including Python, PowerShell, and Java.

Skills

Computer Network Defense (CND) SIEM Splunk Elastic NIDPS Cisco FirePower Palo Alto NGFW Trellix ePO Microsoft Defender Tanium Python PowerShell Java C C++ Ruby Perl JavaScript Kali Nmap Burp Suite Metasploit sqlmap SamuraiWTF Threat Hunting Ticketing Systems

What you'll do

Perform first-line monitoring of security tools and conduct initial analysis of alerts for TS/SCI networks.
Investigate cybersecurity alerts and events and escalate potential incidents to Tier 2 analysts.
Create, update, and manage incident and event tickets within the approved ticketing system.
Conduct proactive threat hunting activities to identify potential malicious activity and emerging threats.
Perform wireless security scans of facilities and document and report all findings.
Correlate alerts and security events across multiple platforms to identify patterns and trends.
Prepare and deliver operational and situational awareness briefings to key stakeholders.
Support annual cyber defense exercises to maintain and improve network security.

What we're looking for

Active TS/SCI security clearance in DISS.
Bachelor's degree in Cybersecurity, IT, Information Assurance, or related field with 4+ years of experience.
Master's degree with 2+ years of experience.
Additional experience may be considered in lieu of a degree.
Concentrated experience in the Computer Network Defense (CND) discipline.
Experience monitoring and investigating alerts from cybersecurity tools, including SIEM systems like Splunk and Elastic.
Experience with NIDPS (Cisco FirePower, Palo Alto NGFW) and host-based tools (Trellix ePO, Microsoft Defender, Tanium).
Knowledge of scripting languages (Python, Perl, Ruby, JavaScript, PowerShell, C, C++, Java) and penetration testing tools.
Knowledge of ticketing systems, report writing, and intelligence gathering/analysis techniques.
Must possess one of the following active certifications: Security+, CySA+, PenTest+, Cloud+, CEH, FITSP O, GMON, GRID, GCIA, GCIH, GICSP, GCED, GDSA, GSEC, CFR, or Cisco CyberOps.

Similar roles

Cyber Defense Analyst

Leidos

Suitland, MD 11 days ago $87,100–$157,450

SIEM Splunk Elastic NIDPS Cisco FirePower Palo Alto NGFW Trellix ePO Microsoft Defender Tanium Python PowerShell Ruby Perl JavaScript C C++ Java Kali Nmap Burp Suite sqlmap Metasploit Threat Hunting Penetration Testing

4+ yrs exp

Save

Computer Network Defense Analyst

Leidos

San Antonio, TX 10 days ago $69,550–$125,725

Network Defense SIEM Splunk Elastic AWS Azure IDS/IPS Firewalls Windows Red Hat Incident Response Network Log Analysis DISA Security+ Disaster Recovery Business Continuity

2+ yrs exp

Save

Cyber Security Analyst

Leidos

Adelphi, MD 48 days ago $87,100–$157,450

Incident Response SIEM IDS AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management SOC Security+ CSSP-Infrastructure Support

4+ yrs exp Hybrid

Save

Cyber Security Analyst

Leidos

Adelphi, MD 48 days ago $87,100–$157,450

Incident Response SIEM IDS AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management Security+ CE CSSP-Infrastructure Support SaaS SOC TTPs IOCs

4+ yrs exp Hybrid

Save

Cyber Security Analyst

Leidos

Adelphi, MD 48 days ago $87,100–$157,450

SIEM IDS Incident Response AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management Security+ CE CSSP-Infrastructure Support SaaS SOC Defense-in-Depth

4+ yrs exp Hybrid

Save

Defensive Cybersecurity Analyst

Leidos

Whitehall, OH 44 days ago $69,550–$125,725

SIEM SOAR IDS/IPS NetFlow Packet Analysis MITRE ATT&CK Cyber Kill Chain AWS Azure GCP Scripting MDM MAM MTD CompTIA Security+ CySA+ GCIA CEH

2+ yrs exp

Save