below marketmost similar roles pay hereabove market
This role pays less than
68%
of similar roles. Most pay
$119,500–$204,200
— the blue band above.
At the midpoint, this role pays about
$122k
versus about
$162k
for comparable roles.
Based on 240 similar postings.
Employer
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.
Leidos currently has
438 open roles
on FindRole.
Listed pay typically runs
$92,300–$166,850
across 353 roles with salary data.
JOB TITLE: SOC Analyst
The SOC Analyst joins the team supporting the Pentagon Reservation under the DISA GSM-O II TN24 Penetration Handling, Incident, System Health (PHISH) Support Services II program. This experienced technical individual-contributor role involves continuous monitoring, detection, analysis, and mitigation of cybersecurity events across networks, endpoints, servers, applications, and cloud environments. You will triage alerts from SIEM, EDR, IDS/IPS, and NetFlow tools, investigate potential compromises, and coordinate response actions with incident responders and cyber engineers. Key responsibilities include conducting forensic network and host analysis, performing proactive threat hunts, and developing detection use cases. Required skills include proficiency in TCP/IP, Windows, and Unix/Linux systems, along with knowledge of MITRE ATT&CK and the Cyber Kill Chain. You will use tools like Splunk or Microsoft Sentinel to identify and remediate malicious activity.
Monitor, triage, and investigate security alerts from SIEM, EDR, IDS/IPS, and other security sensors.
Analyze endpoint, host, network, identity, application, and cloud telemetry to identify malicious activity.
Conduct incident investigations by correlating evidence across data sources and assessing the scope of potential impacts.
Apply cyber threat intelligence to validate alerts, identify indicators of compromise, and prioritize investigations.
Support containment, eradication, and recovery activities by collecting evidence and coordinating with response personnel.
Perform computer forensic network and host analysis to support threat-hunting and evidence-based reporting.
Develop, test, and tune detection use cases, correlation logic, analytic playbooks, and standard operating procedures.
Prepare incident tickets, shift summaries, and technical reports for SOC personnel and operational stakeholders.
What we're looking for
Must have an active DoD Top Secret clearance with the ability to obtain SCI.
Must possess a DoD 8570 IAT II certification (e.g., Security+, SSCP) prior to starting.
Must be able to obtain a DoD 8570 CSSP-Analyst certification (e.g., CEH, CySA+) within 6 months of starting.
Must have a Bachelor’s degree in a technical discipline and 4-8 years of relevant experience, or an equivalent combination of military service and experience.
Must have experience supporting a SOC, CND organization, incident-response team, or comparable cybersecurity operations environment.
Must have experience monitoring and investigating cybersecurity events using SIEM, EDR, IDS/IPS, and various network or cloud data sources.
Must have working knowledge of incident-response processes, TCP/IP, network traffic flow, and enterprise security controls.
Must be familiar with adversary TTPs, attack vectors, and analytic frameworks like MITRE ATT&CK (preferred).