Senior Cybersecurity Analyst

$122,200 - $220,900/Yr

Leidos - Fort Meade, MD

Full-time - Senior

Fort Meade, MD

Professional, Scientific, and Technical Services

About the position

The Senior Cybersecurity Analyst position at Leidos is a critical role that supports the DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN. This position is integral to providing network operations and cyber defense support to the Defense Information Systems Agency (DISA) in alignment with the Department of Defense (DoD) and Combatant Commands (COCOMs). The selected candidate will be responsible for developing and implementing holistic enterprise defensive strategies that enhance the cybersecurity capabilities across the DODIN infrastructure. This includes a focus on various technologies such as cloud services, network boundaries, cross-domain operations, and endpoint technologies. In this role, the Senior Cybersecurity Analyst will conduct thorough analyses of architectures, technologies, and DOD policies to ensure the security and integrity of critical data. The analyst will also be tasked with developing cybersecurity and risk assessment methodologies that support the prevention, detection, and mitigation of anomalous activities, vulnerabilities, and inefficiencies within the network. The position requires the preparation and delivery of briefings tailored for senior leadership, including general officers or flag officers, to communicate findings and recommendations effectively. The analyst will analyze enterprise cybersecurity defensive strategies to enhance operational effectiveness, defense mechanisms, and command and control capabilities. Additionally, the role involves assessing network infrastructure to recommend strategies that minimize adverse impacts and developing standards, metrics, and measures to support assessments and process improvements across the DODIN. A deep understanding of various cybersecurity technologies and areas of interest is essential, including boundary security, endpoint security, and cloud security, to ensure comprehensive protection against cyber threats.

Responsibilities

• Provide analysis of architectures, technologies, DOD policy & information and critical data.
• Develop cybersecurity and risk assessment methodologies and procedures to support prevention, detection, and mitigation of anomalous activity, vulnerabilities and inefficiencies.
• Prepare and perform briefings appropriate for senior leadership (i.e., general officer or flag officer).
• Conduct analysis of enterprise cybersecurity defensive strategies in order to enable operational effectiveness, defense, and command and control.
• Analyze network infrastructure in order to recommend methods and strategies that reduce and/or manage adverse impacts.
• Develop standards, metrics and measures to support assessments, process improvements and operational efficiencies across the DODIN.
• Identify, discover, and maintain cognizance of the DODIN boundary, inclusive of IAPs, peering points, and other major points of ingress/egress to the DODIN.
• Perform analysis, to include planning, assessing, and/or providing enterprise strategies for compliance and integration strategies with mid-tier, and boundary capabilities.
• Develop strategies to monitor, detect, and prevent unauthorized manipulation and access of cloud services.

Requirements

• Bachelor's degree in a related discipline with 8+ years of applicable combined education and experience; additional related years of experience is accepted in lieu of a degree.
• Active DoD TS/SCI clearance and eligible for C/I Polygraph.
• IAT/IAM Level II OR III (Security +, CySA+, CND, CISSP, CASP+, GCIA, GCIH, GCFA, CEH).
• Familiarity with all related aspects of cybersecurity operations and security architecture.
• In-depth knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies (TTPs).

Nice-to-haves

• Experience with DISA and DoD Networks.
• Experience with technical and/or military writing.
• Experience with configuring and operating cybersecurity and networking devices (i.e. routers, firewalls, IDPS).
• Experience with mitigation development against malicious cyber activity.
• Understanding and implementation of Zero Trust concepts and solutions.