# Senior Cybersecurity Analyst **Company**: Leidos **Location**: Alexandria, VA **Work arrangement**: onsite **Experience**: senior **Job type**: full-time **Salary**: $107,900.00 - $195,050.00 **Category**: Security **Industry**: Technology **Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Alexandria-VA/Senior-Cybersecurity-Analyst_R-00196491?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/job/senior-cybersecurity-analyst-da9925ce-6f3/ ## Description Leidos is seeking an experienced Senior Cybersecurity Analyst to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. The Senior Cybersecurity Analyst will perform enterprise-level cybersecurity analysis to identify vulnerabilities, configuration weaknesses, compliance issues, and emerging risks across the DHRA environment. **Mission Environment** - DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)). - The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). - The Senior Cybersecurity Analyst will work across this environment to turn cybersecurity monitoring, vulnerability, compliance, threat, and assessment data into an enterprise view of cyber risk. **Primary Tasks** - Perform comprehensive cybersecurity analysis supporting the management and continued maturation of the DHRA cybersecurity program. - Correlate and analyze cybersecurity data from vulnerability scanners, intrusion detection systems, Security Information and Event Management (SIEM) platforms, red-team assessments, and other Government-provided cybersecurity tools. - Identify vulnerabilities, security misconfigurations, control deficiencies, and deviations from approved security baselines. - Evaluate cybersecurity findings based on severity, exploitability, exposure, and potential mission impact. - Analyze multiple sources of cybersecurity data to identify recurring issues, systemic weaknesses, risk trends, and conditions requiring enterprise-level attention. - Incorporate Department of Defense, DHRA, Government, and open-source threat information into assessments of the enterprise cybersecurity risk posture. - Assess the relationship between identified technical vulnerabilities and relevant threat activity to improve prioritization of remediation efforts. - Develop actionable recommendations for vulnerability mitigation, risk reduction, cybersecurity compliance, and security-posture improvement. - Develop and support the monthly DHRA Cybersecurity Risk Reduction and Compliance Report. - Support cybersecurity scanning, mitigation, compliance analysis, and assessment of adherence to Government cybersecurity standards and requirements. - Evaluate cybersecurity products, capabilities, configurations, and technical approaches as required to support enterprise risk-reduction activities. - Perform senior-level troubleshooting and analysis of complex cybersecurity issues. - Review technical findings and supporting evidence to ensure cybersecurity risks and compliance issues are accurately characterized. - Support development of technical briefings, analytical products, and recommendations for Government cybersecurity and program leadership. - Track significant cybersecurity findings and risk-reduction recommendations. **Basic Qualifications** - Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 10 or more years of relevant cybersecurity experience. - Significant experience performing cybersecurity analysis, information assurance, vulnerability analysis, cybersecurity compliance, or enterprise risk assessment. - Experience correlating information from multiple cybersecurity data sources. - Experience analyzing vulnerability-scanning results, intrusion-detection information, SIEM data, security-assessment findings. - Experience identifying vulnerabilities, security misconfigurations, and deviations from approved security baselines. - Experience evaluating cybersecurity findings based on technical severity, exploitability, threat information, and mission impact. - Experience developing risk-reduction, mitigation, and cybersecurity-compliance recommendations. - Working knowledge of Department of Defense cybersecurity requirements, security standards, and enterprise cybersecurity practices. - Experience developing technical analysis, recurring cybersecurity reports, executive summaries, or risk-posture assessments. - Ability to communicate complex cybersecurity risk and technical findings clearly to both technical and non-technical Government stakeholders. - Active Secret security clearance required. **Preferred Qualifications** - Experience supporting Department of Defense cybersecurity programs or large Federal enterprise environments. - Experience conducting enterprise cybersecurity risk and compliance analysis across multiple systems or authorization boundaries. - Experience integrating vulnerability, threat, security-monitoring, and compliance information into a consolidated assessment of cybersecurity posture. - Experience developing recurring cybersecurity risk, compliance, vulnerability, or executive-level reporting. - Experience with enterprise vulnerability-scanning, intrusion-detection, SIEM, and cybersecurity assessment capabilities. - Experience supporting Tier 3 cybersecurity analysis or troubleshooting. - Familiarity with the Department of Defense Risk Management Framework and continuous-monitoring processes. - Experience providing cybersecurity recommendations directly to Government technical or program leadership. - Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments. For more fresh new jobs, check out [yubhub.co](https://yubhub.co/). ## Skills ### Required - Cybersecurity - Computer Science - Information Technology - Engineering - Vulnerability analysis - Cybersecurity compliance - Enterprise risk assessment - SIEM - Intrusion detection - Risk Management Framework ### Nice to have - Department of Defense cybersecurity programs - Federal enterprise environments - Enterprise cybersecurity risk and compliance analysis - Cybersecurity risk reporting - Vulnerability scanning - Tier 3 cybersecurity analysis - DHRA - DMDC --- Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Alexandria-VA/Senior-Cybersecurity-Analyst_R-00196491?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)