Cyber Security Analyst

Leidos

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Adelphi, MD
Salary: $87,100–$157,450 / yr
Employment: Full-time
Posted: 63 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $140k

This role $122k

$76k $187k

below market most similar roles pay here above market

This role pays less than 65% of similar roles. Most pay $115,000–$165,750 — the blue band above. At the midpoint, this role pays about $122k versus about $140k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Cyber Security Analyst

Role Posting Log in to save

The Cyber Security Analyst joins the C5ISR Defensive Cyber Solutions Branch to protect Department of War networks, systems, and data from sophisticated cyber threats. Working within a high-visibility Security Operations Center, you will perform continuous monitoring, threat detection, incident response, and vulnerability management across on-premises infrastructure and cloud platforms including AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud. Daily responsibilities include leading investigations throughout the incident response lifecycle, correlating security events, and analyzing network artifacts like NetFlow and full packet captures. You will identify attacker tactics, techniques, and procedures, tune SIEM and IDS technologies, and develop response playbooks. Required skills include experience with enterprise SIEM platforms, TCP/IP, Unix-based systems, and cloud security concepts, alongside Security+ CE and CSSP-Infrastructure Support certifications.

Skills

Incident Response SIEM IDS AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management SOC Security+ CSSP-Infrastructure Support

What you'll do

Lead and coordinate investigations throughout the entire incident response lifecycle from detection to remediation.
Correlate and analyze security events, alerts, logs, and network data to determine the scope of cyber incidents.
Acquire and analyze endpoint and network artifacts, including NetFlow and full packet captures, to identify malicious activity.
Identify attacker tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to strengthen defenses.
Tune and maintain SIEM and IDS technologies to reduce false positives and improve detection effectiveness.
Develop and maintain incident response processes, procedures, workflows, and playbooks.
Document investigations and response actions in case management systems and prepare actionable incident reports.

What we're looking for

U.S. citizenship with an active TS/SCI clearance and SAP Eligibility.
Bachelor's degree and 4–8 years of relevant cybersecurity experience.
Baseline certification (Security+ CE) and CSSP-Infrastructure Support certification at start.
Hands-on experience using an enterprise Security Information and Event Management (SIEM) platform.
Experience analyzing high volumes of security logs, network data, NetFlow, and full packet capture.
Strong understanding of TCP/IP, OSI model, system administration, defense-in-depth, and network security technologies.
Understanding of cloud security concepts and familiarity with Unix-based systems.
Experience working in a 24x7 SOC or cyber operations environment (preferred).