Cyber Risk Analyst

The Civil Group at Leidos has an opening for an entry-level Cyber Risk Analyst to support cybersecurity and risk management activities from our Gaithersburg, MD office, with opportunities for telework.

In this role, you will support vulnerability management, continuous monitoring, information assurance, security documentation, and incident response activities across cloud and enterprise environments. You will work with technical and non-technical teams to help maintain compliance with federal cybersecurity requirements and strengthen the overall security posture of supported systems.

• Perform vulnerability assessments, including security scans, analysis of scan results, and documentation of findings.
• Document vulnerabilities and assessment results in accordance with NIST Risk Management Framework (RMF) processes.
• Support continuous monitoring activities across multiple cloud environments and computing platforms.
• Monitor and manage audit trail logs, security scans, and related security data.
• Help ensure systems are maintained in accordance with established security policies, procedures, and compliance requirements.
• Support ongoing cybersecurity reporting to program and management teams.
• Participate in security assessments and assist with the development and maintenance of system security documentation.
• Support implementation and verification of information system security requirements.
• Analyze cyber intelligence data and assist with security incident investigations.
• Perform threat-hunting activities within supported operating environments.
• Maintain awareness of evolving cybersecurity architectures, federal security regulations, and security benchmarks.
• Support implementation and maintenance of automated responses to security events and incidents.
• Work with development teams to support DevSecOps practices within agile development environments.
• Continuously learn and adapt to changes in security technologies, regulations, and program requirements.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field with relevant hands-on experience.
• Must be able to obtain and maintain a Public Trust clearance.
• Must be located in or within commuting distance of the Gaithersburg, MD area.
• Understanding of cybersecurity concepts, vulnerability management, and information assurance principles.
• Ability to work effectively in a dynamic, collaborative environment with multiple functional teams.
• Strong written and verbal communication skills, with the ability to communicate effectively with both technical and non-technical users.
• Demonstrated ability to organize and manage day-to-day priorities independently while supporting overall program objectives.
• Strong analytical, problem-solving, and troubleshooting skills.

• Cybersecurity-related certifications such as Azure Cybersecurity Architect, CISSP, or similar industry-recognized certifications.
• Familiarity with NIST RMF, continuous monitoring, vulnerability management, and federal cybersecurity requirements.
• Experience or familiarity with cloud security environments.
• Understanding of DevSecOps principles and secure agile development practices.
• Familiarity with development and configuration languages such as YAML, Python, and JSON.
• Exposure to threat hunting, incident response, security automation, or cyber intelligence analysis.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.