Job Description

Salary: $69,550 - 125,725 per year Requirements:

• We require working knowledge of US-CERT Federal Incident Notification Guidelines.
• We need at least 4 years of IT experience, including a minimum of 2 years in information security within security operations.
• We expect hands-on experience with Splunk Enterprise, Enterprise Security, and SOAR platforms.
• We require familiarity with CrowdStrike, TrendMicro, and McAfee host-based security tools.
• We need knowledge of log, network, and system forensic investigation methods.
• We require substantial experience analyzing logs from multiple sources, such as host, network traffic, firewall, and intrusion prevention/detection systems.
• We expect experience with intelligence-driven defense using the MITRE ATT&CK framework and the Cyber Kill Chain.
• We need broad knowledge of operating systems, network protocols, system administration, and security technologies.
• We require understanding of TCP/IP networking and the OSI model.
• We expect experience creating actionable content for commercial security tools and/or SIEM solutions.
• We need significant experience monitoring threats through a SIEM console.
• We require strong problem-solving, critical thinking, and analytical abilities, with the capacity to break down complex issues.
• We expect strong customer service and sound decision-making skills.
• We need the ability to build working knowledge of client infrastructure.
• We require a bachelors degree in computer science or a related field, or equivalent professional experience.
• We expect CISSP or Associate certification.
• We require formal IT security/network certification such as GCIA, GNFA, or GCIH.
• Preferred: 3+ years of SOC/CIRT experience, or 1 year as a Lead SOC Analyst.
• Preferred: experience at CMS, HHS, or a comparable federal agency.
• Preferred: CEH certification.
• Preferred: experience with Elastic, Snowflake or another Security Data Lake, and Akamai WAF.
• Preferred: substantial packet analysis experience with Wireshark and malware analysis.

• We hunt for malicious activity across networks and digital assets.
• We respond to cyber security incidents and carry out threat analysis.
• We identify and act on malicious or unusual activity.
• We analyze data with a range of tools and datasets to uncover indicators of compromise.
• We conduct detailed investigation and response work for potential security incidents.
• We provide accurate, priority-driven analysis of cyber activity and threats.
• We perform payload analysis of network packets.
• We recommend countermeasures and mitigation controls.
• We gather all relevant information to support timely identification, containment, eradication, and recovery.
• We work with technical and threat intelligence analysts to deliver indications and warnings and support predictive threat analysis.
• We mentor junior team members in cybersecurity methods and processes.
• We create and continuously refine SOC standard operating procedures.
• We resolve or coordinate the resolution of cyber security events.
• We monitor incoming event queues for potential incidents.
• We create, manage, and dispatch incident tickets.
• We monitor external event sources for actionable security intelligence and incidents.
• We maintain incident logs with relevant activity.
• We document investigation findings and share key details with the SOC Lead, Incident Management team, and stakeholders.
• We participate in root cause analysis and lessons learned reviews.

• CMS
• Firewall
• Support
• Network
• Security
• Snowflake
• Splunk
• TCP/IP
• WAF

More:

We are Leidos, an industry and technology leader serving government and commercial customers with smarter digital and mission-focused innovation. We are hiring a Mid-Level Cyber Security Analyst for a long-term, full-time/permanent contract supporting a U.S. Government civilian agency in Baltimore, Maryland. The role is available immediately for a qualified candidate with the appropriate background clearance. We offer competitive compensation, health and wellness programs, income protection, paid leave, and retirement benefits. Our pay range for this position is $69,550.00 to $125,725.00. We are a global team of about 47,000 employees headquartered in Reston, Virginia, and we are committed to building a workplace that values impact, speed, and mission success.

last updated 26 week of 2026

Job Tags

Similar Jobs