Description
The Leidos Digital Sector has a current job opportunity for a Cyber Fusion and Threats Analyst on our GSM-O II DISA Command Comprehensive Support Services (DCCSS) program supporting the 24x7 operations at the DISA Joint Operations Center (D2OC) on Ft. Meade, MD.
The GSM-O II provides network operations and cyber defence support to the Defence Information Systems Agency (DISA) in support of the Department of Defence (DoD) and Combatant Commands (CoCOMs).
Primary Responsibilities:
- Maintain situational awareness of cyber activity by reviewing DoD, Intelligence Community and open source reporting for new vulnerabilities, malware or other threats that have the potential to impact the DoDIN.
- Support mission-critical Continuity of Operations (COOP).
- Synthesise, summarise, consolidate and share potentially malicious activities on the DoDIN with DISA and mission partner organisations by creating incident reports, wiki updates, collaboration/chat tips and notifications, DoD incident handling database queries, metrics, and trend reports.
- Assist in providing threat and vulnerability analysis as well as security advisory services and recommendations.
- Train and mentor other team members.
Basic Qualifications:
- Bachelor's degree with 8+ years of professional experience (related DISA experience and cyber courses/certification is accepted in lieu of a degree.)
- Must have DoD-8140 IAT Level 2 baseline certification (Security+ CE or higher) at start date.
- Proficient understanding of Cyber Network Defence (CND) in regards to protect, detect, respond and sustain within a Computer Incident Response organisation.
- Excellent verbal and written communication skills including the ability to clearly articulate technical and strategic level cyber matters to a variety of audiences.
- Highly developed research and analytical skills to pinpoint statistically significant patterns related to cyber threats.
- Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defence-in-depth.
- Must have an active Top Secret/SCI clearance.
Preferred Qualifications:
- Knowledgeable in Cloud security/defence.
- Experience with DISA and DoD Networks.
- Working knowledge of cyber operational security, log analysis, netflow analysis, incident response, malware analysis, computer forensics, and/or cyber-crime.
- Advanced Certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP.
- Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
- Working knowledge and proficiency utilising Wireshark and Splunk analysis tools.
- Experience in intelligence driven defence and/or Cyber Kill Chain (CKC) methodology; knowledge of Advanced Persistent Threat (APT) and other cyber threat modelling frameworks.
- Working knowledge of the U.S. Intelligence Community and/or Fusion centres.
Pay Range: $107,900.00 - $195,050.00