Advanced Threat Detection and Hunt Analyst

Posted 17 Hours Ago
Be an Early Applicant
Scott Air Force Base, IL
81K-147K Annually
1-3 Years Experience
Information Technology • Software
The Role
The Advanced Threat Detection and Hunt Analyst will support DISA's cybersecurity operations, conducting threat monitoring and analysis, leading hunt initiatives, and creating reports on malicious activities. This role requires technical guidance proficiency, customer engagement skills, and the ability to train peers.
Summary Generated by Built In

This position will support the Defense Information Systems Agency (DISA) GSM-O II program, and DISA Global Defensive Cyber Operations (DCO) organization based out of Scott AFB, IL with Threat Detection and Hunt efforts, management of adversary indicators of compromise, tracking and monitoring of adversary tactics, techniques, and procedures, and leading certain Nation State focused activities internally and externally to DISA Global. This position will provide technical guidance for defensive cyber operations activities and will be expected to actively engage with a variety of customers and mission partners, anticipating their needs, and delivering flawlessly. 

POSITION SUMMARY:
GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the Department of Defense (DoD) and Combatant Commands (CoCOMs).

PRIMARY RESPONSIBILITIES:

  • Maintain situational awareness of cyber activity by reviewing DoD, Intelligence Community and open source reporting for new threat actors, vulnerabilities, malware or other threats that have the potential to impact the DoDIN.
  • Conduct general focused hunts as guided and lead all efforts related to certain Nation States and associated threat actors.
  • Synthesize, summarize, consolidate and share potentially malicious activities on the DoDIN with DISA and mission partner organizations by creating incident reports, wiki updates, collaboration/chat tippers and notifications, DoD incident handling database queries, metrics, and trend reports.
  • Assist in providing threat and vulnerability analysis as well as security advisory services and recommendations.
  • Train and mentor other team members.

BASIC QUALIFICATIONS:

  • Must have an active Top Secret clearance.
  • Bachelor's degree with 4-8 years of professional experience or Associate’s degree with 6-8 years of professional experience (related DISA and domain (relevant Nation State actors) experience and cyber courses/certification is accepted in lieu of a degree.)
  • Must have DoD-8570 IAT Level 2 baseline certification (Security+ CE or higher) at start date and be able to obtain CSSP-A certification within 180 days of start date. 
  • Proficient in reading/writing one of the following Korean, Russian, Mandarin, Arabic or Farsi
  • Up to date awareness of geo-political situation in the AOR
  • Proficient understanding of Cyber Network Defense (CND) in regards to protect, detect, respond and sustain within a Computer Incident Response organization. 
  • Excellent verbal and written communication skills including the ability to clearly articulate technical and strategic level cyber matters to a variety of audiences.
  • Highly developed research and analytical skills to pinpoint statistically significant patterns related to cyber threats.

PREFERRED QUALIFICATIONS:

  • Basic conversational fluency in Korean, Russian, Mandarin, Arabic or Farsi
  • Knowledgeable in Cloud security/defense.
  • Experience with DISA and DoD Networks.
  • Working knowledge of cyber operational security, log analysis, netflow analysis, incident response, malware analysis, computer forensics, and/or cyber-crime.
  • Advanced Certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP.
  • Demonstrated experience briefing local leadership.
  • Prior linguist experience or intelligence background
  • Working knowledge and proficiency utilizing Wireshark and Splunk analysis tools.
  • Experience in intelligence driven defense and/or Cyber Kill Chain (CKC) methodology; knowledge of Advanced Persistent Threat (APT) and other cyber threat modeling frame works.
  • Working knowledge of the U.S. Intelligence Community and/or Fusion centers.

Original Posting Date:2024-09-17

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:Pay Range $81,250.00 - $146,875.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Top Skills

Security+
The Company
Alexandria, VA
27,104 Employees
On-site Workplace

What We Do

We Are Leidos

For 50 years we have been tackling some of the biggest problems that face our nation and our world.

OUR MISSION
Through our culture of innovation and history of performance, we develop deep customer trust built on integrity and create enduring solutions that improve our world. Leidos is a science and technology solutions leader working to address some of the world’s toughest challenges in the defense, intelligence, homeland security, civil, and healthcare markets. The company’s 43,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Va., Leidos reported annual revenues of approximately $11.09 billion for the fiscal year ended January 3, 2020.

Leidos was cited for the meaningful work employees perform that is challenging, impactful, and aligned with our customers’ missions as reasons professionals want to work and stay at our company. Leidos has also been named to lists including Forbes’ Best Employers for Diversity, Forbes’ America’s Best Employers for Women, Military Times Best for Vets Employers, and Ethisphere Institute’s World's Most Ethical Companies®.

Employees enjoy career enrichment opportunities available through mobility and development and experience rewarding relationships with supportive supervisors and talented colleagues and customers. Employees appreciate our flexible work environment, allowing for and encouraging a true work-life balance. Our professionals are also excited about our Employee Resource Groups, like the newly launched Collaborative Outreach with Remote and Embedded Employees (CORE), which strives to create an environment where every employee, regardless of location, feels fully engaged as a valued employee of Leidos.

Your most important work is ahead.

Jobs at Similar Companies

bet365 Logo bet365

Junior Sports Analyst

Digital Media • Gaming • Software • eSports • Automation
Denver, CO, USA
6100 Employees
55K-80K Annually

Silverfort Logo Silverfort

Sales Operations Analyst

Information Technology • Sales • Security • Cybersecurity • Automation
Remote
United States
357 Employees

Jobba Trade Technologies, Inc. Logo Jobba Trade Technologies, Inc.

Customer Success Specialist

Cloud • Information Technology • Productivity • Professional Services • Software
Hybrid
Chicago, IL, USA
45 Employees

Similar Companies Hiring

Silverfort Thumbnail
Security • Sales • Information Technology • Cybersecurity • Automation
GB
357 Employees
bet365 Thumbnail
Software • Gaming • eSports • Digital Media • Automation
Denver, Colorado
6100 Employees
Jobba Trade Technologies, Inc. Thumbnail
Software • Professional Services • Productivity • Information Technology • Cloud
Chicago, IL
45 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account