Senior Cybersecurity Analyst

Leidos is seeking an experienced Senior Cybersecurity Analyst to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. The Senior Cybersecurity Analyst will perform enterprise-level cybersecurity analysis to identify vulnerabilities, configuration weaknesses, compliance issues, and emerging risks across the DHRA environment.

Mission Environment

• DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)).
• The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS).
• The Senior Cybersecurity Analyst will work across this environment to turn cybersecurity monitoring, vulnerability, compliance, threat, and assessment data into an enterprise view of cyber risk.

Primary Tasks

• Perform comprehensive cybersecurity analysis supporting the management and continued maturation of the DHRA cybersecurity program.
• Correlate and analyze cybersecurity data from vulnerability scanners, intrusion detection systems, Security Information and Event Management (SIEM) platforms, red-team assessments, and other Government-provided cybersecurity tools.
• Identify vulnerabilities, security misconfigurations, control deficiencies, and deviations from approved security baselines.
• Evaluate cybersecurity findings based on severity, exploitability, exposure, and potential mission impact.
• Analyze multiple sources of cybersecurity data to identify recurring issues, systemic weaknesses, risk trends, and conditions requiring enterprise-level attention.
• Incorporate Department of Defense, DHRA, Government, and open-source threat information into assessments of the enterprise cybersecurity risk posture.
• Assess the relationship between identified technical vulnerabilities and relevant threat activity to improve prioritization of remediation efforts.
• Develop actionable recommendations for vulnerability mitigation, risk reduction, cybersecurity compliance, and security-posture improvement.
• Develop and support the monthly DHRA Cybersecurity Risk Reduction and Compliance Report.
• Support cybersecurity scanning, mitigation, compliance analysis, and assessment of adherence to Government cybersecurity standards and requirements.
• Evaluate cybersecurity products, capabilities, configurations, and technical approaches as required to support enterprise risk-reduction activities.
• Perform senior-level troubleshooting and analysis of complex cybersecurity issues.
• Review technical findings and supporting evidence to ensure cybersecurity risks and compliance issues are accurately characterized.
• Support development of technical briefings, analytical products, and recommendations for Government cybersecurity and program leadership.
• Track significant cybersecurity findings and risk-reduction recommendations.

Basic Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 10 or more years of relevant cybersecurity experience.
• Significant experience performing cybersecurity analysis, information assurance, vulnerability analysis, cybersecurity compliance, or enterprise risk assessment.
• Experience correlating information from multiple cybersecurity data sources.
• Experience analyzing vulnerability-scanning results, intrusion-detection information, SIEM data, security-assessment findings.
• Experience identifying vulnerabilities, security misconfigurations, and deviations from approved security baselines.
• Experience evaluating cybersecurity findings based on technical severity, exploitability, threat information, and mission impact.
• Experience developing risk-reduction, mitigation, and cybersecurity-compliance recommendations.
• Working knowledge of Department of Defense cybersecurity requirements, security standards, and enterprise cybersecurity practices.
• Experience developing technical analysis, recurring cybersecurity reports, executive summaries, or risk-posture assessments.
• Ability to communicate complex cybersecurity risk and technical findings clearly to both technical and non-technical Government stakeholders.
• Active Secret security clearance required.

Preferred Qualifications

• Experience supporting Department of Defense cybersecurity programs or large Federal enterprise environments.
• Experience conducting enterprise cybersecurity risk and compliance analysis across multiple systems or authorization boundaries.
• Experience integrating vulnerability, threat, security-monitoring, and compliance information into a consolidated assessment of cybersecurity posture.
• Experience developing recurring cybersecurity risk, compliance, vulnerability, or executive-level reporting.
• Experience with enterprise vulnerability-scanning, intrusion-detection, SIEM, and cybersecurity assessment capabilities.
• Experience supporting Tier 3 cybersecurity analysis or troubleshooting.
• Familiarity with the Department of Defense Risk Management Framework and continuous-monitoring processes.
• Experience providing cybersecurity recommendations directly to Government technical or program leadership.
• Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments.