Senior Cyber Defense Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $107.9k - $195.1k / year

⏰ Full Time

🟠 Senior

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Analyze network and host activity associated with successful and unsuccessful intrusions by advanced attackers • Perform network traffic analysis using raw packet data, net flow, IDS, and custom sensor output • Support enterprise incident response efforts • Create and add custom signatures to mitigate highly dynamic threats • Employ advanced forensic tools and techniques for attack reconstruction and intelligence gathering • Research emerging cyber threats and analyze attacker methodologies, tactics, system vulnerabilities, and indicators of attacks and exploits • Contribute to threat intelligence reports and briefings providing situational awareness of cyber threats impacting global network infrastructure • Participate in threat hunt operations using adversary tactics, techniques, procedures, and indicators of attack • Collaborate through information-sharing networks and professional relationships • Provide on-call incident response support outside core hours as needed • Mentor junior analysts technically and conceptually • Lead small groups on projects and incident response tasks • Drive advanced countermeasures through completion • Educate the team about defending new threat vectors • Help integrate hyperautomation and agentic AI into the detection, triage, and response lifecycle, including intelligent orchestration, signal correlation, and accelerated investigative workflows

🎯 Requirements

• Must be a U.S. Citizen and eligible to obtain DoD Secret clearance • BS Degree and 8–12 years relevant experience in cybersecurity or network defense; or equivalent education and years of relevant experience coupled with relevant certifications (CISSP, SANS GIAC, CEH, etc.) may be considered in lieu of degree • Experience in conventional network/host-based intrusion analysis, digital forensics, or malware analysis • Experience performing “deep dive” analysis and correlation of log data from multiple sources including PCAP and forensic artifacts • Experience leading and contributing to incident response activities • Strong understanding of Operating Systems and Network Protocols • Proficiency with Microsoft Windows administrative tools and the Unix/Linux command line • Preferred: understanding of behavioral-based threat models, including ATT&CK, Cyber Kill Chain, Diamond Model, etc. • Preferred experience with Splunk or other SIEM-type platform • Familiarity with Perl and Python • Previous experience as Threat Researcher and/or Intelligence Analyst • Experience with dynamic malware analysis and reverse engineering • Experience in cryptography or cryptanalysis • Experience in cybersecurity engineering • Experience defending large cloud infrastructures (AWS, Azure, etc.) • Ability to create, modify, and implement Snort and YARA signatures • Published research papers at conferences or through other mediums • Working knowledge of CNE, CNA, and CND tools and techniques • Deep understanding of advanced cyber threats targeting enterprises and their associated tools, tactics, and procedures • Experience applying threat and data modeling, advanced data correlation, and statistical analysis to develop alerts, notable events, investigative dashboards, and metrics-driven reports