# Detection, Monitoring, and Countermeasures Lead **Company**: Leidos **Location**: Alexandria, VA **Experience**: senior **Job type**: full-time **Salary**: $131,300.00 - $237,350.00 **Category**: Security **Industry**: Technology **Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Alexandria-VA/Detection--Monitoring----Countermeasures-Lead_R-00193682?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_fd66ba2c-3de ## Description The Detection, Monitoring, and Countermeasures Lead serves as a senior Subject Matter Expert (SME) responsible for the operational management and technical optimization of the Security Operations Center's (SOC) detection, triage, and prevention capabilities. This role leads the continuous monitoring of Pentagon networks, directs the tuning of all security tools to ensure optimal detection, and develops and implements countermeasures to mitigate security risks and prevent adversary actions. The Lead will manage a team of 10-15 staff in a high-pressure, 24/7/365 environment, ensuring the effectiveness and compliance of all detection and prevention systems in accordance with CJCSM 6510.01, DoD/IC directives, and the Performance Work Statement (PWS). **Primary Responsibilities** - Lead the 24x7x365 real-time monitoring and analysis of network and endpoint security data from the J6 Pentagon sensor grid, including IDS/IPS, firewalls, netflow, packet capture, and SIEM. - Direct the identification, trending, and correlation of event data to identify malicious cyber activity, including insider threats and APTs. - Oversee backbone network monitoring to ensure proper configuration for both signature-based and anomalous activity detection. - Lead the Countermeasures Team in the effective tuning and optimization of all security systems, such as SIEM, IDS/IPS, and End Point Security. - Ensure tools are configured with correct data feeds and direct the application of vendor and custom signatures to prevent, detect, and block malicious activity. - Lead the development and implementation of countermeasures to mitigate potential security risks. - Assess the effectiveness of current monitoring capabilities to drive process improvements and develop project plans for government approval to implement recommended detection enhancements. - Provide monthly reports to the Government on system uptime, availability, maintenance, and vulnerability mitigation. - Provide input for monthly, quarterly, and annual reports detailing tool versions, upgrade plans, and license counts, while maintaining SOPs, after-hours recall rosters, and lifecycle status reports for all managed infrastructure. **Required Qualifications & Skills** - Must possess an active Top-Secret clearance with SCI eligibility. - Access to SCI, NIPRNet, SIPRNet, and JWICS networks is required. - Requires a bachelor's degree in a relevant IT or Cybersecurity field and 12 to 15 years of prior relevant experience; OR a Master's degree with 10 to 13 years of prior relevant experience. - This must include 5+ years in incident handling or SOC operations, extensive experience operating, planning, and managing a SOC/CIRT, and 3+ years of demonstrated experience administering and deploying enterprise network defense tools. - Prior to Start: Must meet DoD 8140/8570.01-M requirements for IAT Level II. - Within 180 Days: Must obtain a CSSP Analyst certification. - Enterprise Tool & Infrastructure Expertise in the architecture, engineering, and operations of enterprise SIEM platforms, endpoint security solutions, and modern security infrastructure. - Defensive Cyber Operations (DCO), Threat Hunting & Forensics: Experience executing and supporting DCO training and operations. - Advanced Network Fundamentals & Complex Problem Solving: Deep understanding of network traffic, the OSI model, defense-in-depth principles, and the network threat lifecycle. - Technical Leadership & Mentorship: Proven experience serving as a technical lead on large, complex projects. - Executive Communication & Reporting: Exceptional communication skills with the demonstrated ability to draft comprehensive technical reports and brief senior executive leadership. - Innovation & Technology Integration: Ability to drive the research, fielding, and integration of new security technologies. ## Skills ### Required - SIEM - IDS/IPS - Endpoint Security - Network Traffic Analysis - Threat Hunting - Forensic Analysis - Technical Leadership - Communication - Project Management --- Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Alexandria-VA/Detection--Monitoring----Countermeasures-Lead_R-00193682?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)