Cyber Real-Time Analyst

Leidos

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Pearl Harbor, HI
Salary
$69,550–$125,725 / yr
Employment
Full-time
Posted
78 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $138k
This role $98k
$58k $179k
below market most similar roles pay here above market

This role pays less than 91% of similar roles. Most pay $114,925–$162,000 — the blue band above. At the midpoint, this role pays about $98k versus about $138k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Cyber Real-Time Analyst

JOB TITLE: Cyber Real-Time Analyst The Cyber Real-Time Analyst joins the Network Assurance Team to support DISA Pacific. This role involves monitoring, detecting, and analyzing intrusions across the DODIN/DISN boundary on a 24/7/365 basis. Responsibilities include performing near real-time triage of security events, correlating alerts, netflow, and raw packet captures to identify malicious activity. The analyst will conduct deep-dive analysis of low and slow activity, develop custom detection signatures, and document findings in mandated reporting systems. Key technologies include Splunk, Elastic, Microsoft Sentinel, and the ThunderDome suite, alongside Corelight sensors and JIRA for incident workflows. The role requires applying the MITRE ATT&CK framework to characterize adversary tactics. This position supports both established boundary defense operations and the stand-up of a new Joint Fires Network Security Operations Center.

What you'll do

  • Monitor and analyze intrusions and threats across the DODIN/DISN boundary using network monitoring and traffic analysis tools.
  • Perform near real-time triage of security events by correlating alerts, netflow, IDS/IPS output, and raw packet captures.
  • Conduct deep-dive analysis of "low and slow" activity to identify unauthorized access missed by automated tools.
  • Investigate security events using SIEM platforms including Splunk, Elastic, and Microsoft Sentinel.
  • Apply the MITRE ATT&CK framework to characterize adversary tactics and guide threat-hunting efforts.
  • Develop and tune custom detection signatures and countermeasures to mitigate emerging cyber threats.
  • Document findings in mandated incident reporting systems and issue Situational Awareness Reports to mission partners.
  • Support the stand-up and sustainment of a 24/7 Security Operations Center for the Joint Fires Network.

What we're looking for

  • Active Top Secret security clearance with eligibility/ability to obtain SCI.
  • Bachelor's degree and 2+ years of relevant experience for Level II (equivalent work experience or military service may be considered).
  • Bachelor's degree and 4+ years of relevant experience for Level III (equivalent work experience or military service may be considered).
  • Qualifications/credentials compliant with DoD 8140 DCWF Code 531, Cyber Defense Analyst at the Intermediate proficiency level.
  • Hands-on experience with Computer Network Defense duties including protecting, defending, responding, and sustaining.
  • Strong networking fundamentals including communication protocols and common security tooling like IDS/IPS and firewalls.
  • Experience evaluating packet captures and analyzing raw network traffic.
  • Willingness and ability to work rotating shifts in support of 24/7/365 operations.

More like this

Similar roles

Cyber Analyst

Leidos

Lawton, OK 81 days ago $87,100–$157,450
SOC Threat Intelligence Detection Engineering Forensics Linux Wireshark Network Analysis MITRE ATT&CK Agile Scrum Memory Forensics Telemetry SIGINT Cryptographic Key Management
4+ yrs exp

Cyber Security Analyst

Leidos

Adelphi, MD 63 days ago $87,100–$157,450
Incident Response SIEM IDS AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management SOC Security+ CSSP-Infrastructure Support
4+ yrs exp Hybrid

Cyber Security Analyst

Leidos

Adelphi, MD 63 days ago $87,100–$157,450
Incident Response SIEM IDS AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management Security+ CE CSSP-Infrastructure Support SaaS SOC TTPs IOCs
4+ yrs exp Hybrid

Cyber Security Analyst

Leidos

Adelphi, MD 63 days ago $87,100–$157,450
SIEM IDS Incident Response AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management Security+ CE CSSP-Infrastructure Support SaaS SOC Defense-in-Depth
4+ yrs exp Hybrid

Cyber Defense Analyst

Leidos

Suitland, MD 11 days ago $87,100–$157,450
SIEM Splunk Elastic NIDPS Cisco FirePower Palo Alto NGFW Trellix ePO Microsoft Defender Tanium Python PowerShell Ruby Perl JavaScript C C++ Java Kali Nmap Burp Suite sqlmap Metasploit Threat Hunting Penetration Testing
4+ yrs exp

Cyber Intel Analyst

Leidos

Washington, DC 42 days ago $87,100–$157,450
Threat Hunting Threat Intelligence Cyber Fusion MITRE ATT&CK SIEM EDR Python PowerShell Bash AWS Azure O365 Splunk KQL Elastic DSL DFIR Anomali ThreatConnect MISP TCP/IP DNS HTTP/S IDS/IPS Next-Gen Firewalls
4+ yrs exp Hybrid