This role pays less than
90%
of similar roles. Most pay
$139,200–$190,487
— the shaded band above.
At the midpoint, this role pays about
$122k
versus about
$165k
for comparable roles.
Based on 240 similar postings.
Employer
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.
Leidos currently has
264 open roles
on FindRole.
Listed pay typically runs
$92,300–$166,850
across 245 roles with salary data.
The Cyber Tier 1 Deputy Team Lead joins the Network Operations Security Center team to enhance operational efficiency and improve the overall cybersecurity posture of the Department of Homeland Security enterprise. This role involves leading onboarding optimization using Lean Six Sigma methodologies, refining Standard Operating Procedures, and managing training programs and tool access for the team. The individual will perform quality assurance on Splunk investigations, evaluate new tools in development environments, and serve as a primary point of contact for federal leadership. Daily responsibilities include network security monitoring, threat hunting, and analyzing logs to identify malware patterns. Required skills include proficiency with Wireshark, firewall management, and packet analysis. The role addresses the critical need to monitor, detect, and mitigate cyber threats across the Trusted Internet Connection and Policy Enforcement Point infrastructure.
Lead efforts to optimize onboarding processes and reduce administrative waste using Lean Six Sigma methodologies.
Review and refine Standard Operating Procedures (SOPs) to ensure workflows remain modern and efficient.
Act as a primary point of contact for federal leadership to address high-level requests and requirements.
Manage team access to cybersecurity tools and provide technical training on tool functionality.
Coordinate tasks across multiple shifts to ensure consistent communication and completion of all items.
Perform quality assurance checks on Splunk investigations, firewall blocks, and security event notifications.
Analyze investigation trends to improve the accuracy and effectiveness of monitoring content and alerts.
Test and evaluate new cybersecurity tools and features in development environments before enterprise adoption.
What we're looking for
Must have a Bachelor's degree and 4 years of experience, an Associate's degree and 6 years of experience, or a high school diploma and 8 years of experience.
Military experience and training may be considered in lieu of a degree.
Must possess an active advanced cybersecurity certification (e.g., CCNA-Security, CYSA+, GICSP, GSEC, Security+ CE, CND, or SSCP).
Must have a current TS/SCI security clearance.
Must have professional experience in at least two areas including GenAI, Vulnerability Assessment, Intrusion Prevention, Access Control, or Incident Response.
Experience conducting detailed technical analysis of cybersecurity events and incidents is required.
Expertise in network topologies, packet analysis tools like Wireshark, and common malware/attack vectors is required.
Familiarity with other continuous improvement methodologies such as Theory of Constraints (preferred).
Splunk
HBSS/Trellix
Ansible
CloudFormation
Python
PowerShell
AWS
DevSecOps
IDS/IPS
Firewalls
VPN
Data Loss Prevention
GitHub
GitLab
SonarQube
SolarWinds
Linux Red Hat
Windows
Agile
Microsoft Sentinel
Python
Bash
PowerShell
CI/CD
Infrastructure as Code
Git
Linux
Windows
macOS
SIEM
SOAR
AI/LLM Security
Penetration Testing
Agile
Cyber Range Operations