Cyber Analyst
Leidos · Lawton, OK ·
- Seniority
- Middle
- Employment
- Full time
- Category
- Security
- Experience
- 2+ years
- Company size
- 1000+
- Salary
- USD 87,100 – 157,450 / year
Leidos · Lawton, OK ·
Markon · Fort Meade, MD, US
Markon · Fort Meade, MD, US
Markon · Fort Meade, MD, US
RED ALPHA CYBERSECURITY PTE. LTD. · Singapore
Mid-level cyber analyst builds and tunes detection algorithms, analyzes threats, and bridges SOC operations with software engineering to counter advanced adversaries.
Leidos has a new and exciting opportunity for a Cyber Analyst in our INTEL Sector's Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security
Leidos seeks a Mid-Level Cyber Analyst to support development and research efforts alongside a diverse team creating solutions for Cyber, EW, and PNT threats at the tactical edge. You’ll help shape detection algorithms and actionable alerts by applying practical SOC experience and forensic expertise, working closely with skilled Red Teamers to identify and counter advanced adversary techniques.
This is a full-time position with the Leidos Cyber Electromagnetic Activity (CEMA) team that is based in Lawton, OK, and will require the candidate to be able to obtain and maintain a TS/SCI Clearance.
Primary Responsibilities:
Perform Threat Intelligence Integration and Research reporting on detection gaps within our problem set while staying current on TTPs, vulnerabilities, and SOC technologies
Detection Engineering & Tuning analyzing false positives/negatives and providing feedback to developers so they can tweak detection algorithms for accuracy and operational relevance
Bridge the gap between defensive operations and software engineering by conducting training sessions and walkthroughs using simulated SOC scenarios
Participate in sprint planning and product roadmap discussions to ensure the "operator perspective" is baked into software requirements
Provide input on UI/UX for analyst efficiency and reduce cognitive load during high-stress alerts
Basic Qualifications:
Bachelor’s Degree in cybersecurity or similar degree and 4- 8 years of relevant experience. Will consider experience in lieu of a degree
Minimum 4+ years of professional experience in Cyber Security
Minimum 2+ years of professional experience as a SOC operator
Intermediate to Expert knowledge of Linux
A good understanding of networking – protocols at all layers of the networking stack and network architecture accompanied with various tooling needed for network analysis such as Wireshark.
Intermediate to Expert knowledge of host-based forensics, telemetry generation, and low-level artifacts (like memory, processes, and network packet analysis).
Moderate ability to produce scripts for testing
Must be a US Citizen and be able to obtain a TS/SCI security clearance.
Preferred Qualifications :
Experience analyzing low-level system artifacts, memory forensics, or firmware/embedded system security.
Familiarity with the MITRE ATT&CK framework and mapping telemetry to specific adversary behaviors.
Experience working in an Agile/Scrum development environment alongside software engineers.
GIAC Certified Detection Engineer (GCDE)
GIAC Certified Forensic Analyst (GCFA) / GIAC Network Forensic Analyst (GNFA)
FOR572: Advance Network Forensics
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
the-swift-group · Annapolis Junction, USA