Cyber Security Analyst

Leidos

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Adelphi, MD
Salary: $87,100–$157,450 / yr
Employment: Full-time
Posted: 63 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $140k

This role $122k

$76k $187k

below market most similar roles pay here above market

This role pays less than 65% of similar roles. Most pay $115,000–$165,750 — the blue band above. At the midpoint, this role pays about $122k versus about $140k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Cyber Security Analyst

Role Posting Log in to save

The Cyber Security Analyst joins the C5ISR Defensive Cyber Solutions Branch to protect Department of War networks, systems, and data from sophisticated cyber threats. Working within a high-visibility Security Operations Center, the analyst performs continuous monitoring, threat detection, incident response, and vulnerability management across on-premises infrastructure and cloud platforms including AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud. Key responsibilities include leading investigations throughout the incident response lifecycle, correlating security events, and analyzing network artifacts like NetFlow and full packet captures. The role requires tuning SIEM and IDS technologies, developing playbooks, and identifying attacker tactics, techniques, and procedures. Candidates must possess skills in TCP/IP, Unix-based systems, and network security technologies to defend the DoD Information Network against advanced persistent threat actors in a fast-paced operational environment.

Skills

SIEM IDS Incident Response AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management Security+ CE CSSP-Infrastructure Support SaaS SOC Defense-in-Depth

What you'll do

Lead and coordinate investigations throughout the entire incident response lifecycle from detection to remediation.
Correlate and analyze security events, alerts, logs, and network data to determine the scope of cyber incidents.
Acquire and analyze endpoint and network artifacts, including NetFlow and full packet captures, to identify malicious activity.
Identify attacker tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to strengthen defenses.
Tune and maintain SIEM and IDS technologies to reduce false positives and improve SOC detection effectiveness.
Develop and maintain incident response processes, procedures, workflows, and playbooks.
Document investigations and response actions in case management systems and prepare actionable incident reports.

What we're looking for

U.S. citizenship with an active TS/SCI clearance with SAP Eligibility.
Bachelor's degree and 4–8 years of relevant cybersecurity experience.
Baseline certification (Security+ CE) and CSSP-Infrastructure Support certification at start.
Hands-on experience using an enterprise Security Information and Event Management (SIEM) platform.
Experience analyzing high volumes of security logs, network data, NetFlow, and full packet capture.
Strong understanding of TCP/IP, OSI model, system administration, defense-in-depth, and network security technologies.
Understanding of cloud security concepts and familiarity with Unix-based systems.
Ability to work the 2:00 p.m.–10:00 p.m. swing shift.

Save