> Markdown version of [/jobs/ext/1988683-cyber-analyst](https://www.wearedevelopers.com/jobs/ext/1988683-cyber-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Analyst - **Company:** Leidos, Inc. - **Location:** Lawton, OK, United States - **Experience:** Experienced - **Salary:** $87,100.0 - $157,450.0 - **Contract:** Permanent contract - **Skills:** Data Analysis, Network Analysis, Signals Intelligence, Cyber Security, Firmware, Design of User Interfaces, Integrated Development Environments, Intrusion Detection and Prevention, Network Packet, Key Management, Network Forensics, Scrum Methodology, Software Engineering, Software Requirements Analysis, Wireshark, Computer Network Operations, Mitre Att&ck, Cyber Threat Analysis - **Published:** August 8, 2026 - **Apply:** https://dejobs.org/x/x/17394CB764E1459FB97875FB11863B54/job/ ## About the Role This is a full-time position with the Leidos Cyber Electromagnetic Activity (CEMA) team that is based in Lawton, OK, and will require the candidate to be able toobtain andmaintaina TS/SCI Clearance., * Bachelor's Degree incybersecurityor similar degree and 4- 8 years of relevant experience. Will consider experience in lieu of a degree * Minimum4+ years of professionalexperience in Cyber Security * Minimum2+ years of professional experience as a SOC operator * Intermediate to ExpertknowledgeofLinux * A good understanding of networking - protocols at all layers of the networking stack and network architectureaccompanied with various tooling needed for network analysis such as Wireshark. * Intermediate to Expert knowledge of host-based forensics, telemetry generation, and low-level artifacts (like memory, processes, and network packet analysis). * Moderate ability to produce scripts for testing * Must be a US Citizen and be able to obtain a TS/SCI security clearance., * Experience analyzing low-level system artifacts, memory forensics, or firmware/embedded system security. * Familiarity with the MITRE ATT&CK framework and mapping telemetry to specific adversary behaviors. * Experience working in an Agile/Scrum development environment alongside software engineers. * GIAC Certified Detection Engineer (GCDE) * GIAC Certified Forensic Analyst (GCFA) / GIAC Network Forensic Analyst (GNFA) * FOR572: Advance Network Forensics ## Description Leidos has a new and exciting opportunity for a Cyber Analyst in our INTEL Sector's Cyber & Analytics Business Area (CABA) . Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos , we offer competitive benefits , including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security, * Perform Threat Intelligence Integration and Researchreportingon detection gapswithin our problem setwhile stayingcurrent on TTPs, vulnerabilities, and SOC technologies * Detection Engineering & Tuninganalyzingfalse positives/negatives and providingfeedback to developersso they can tweakdetection algorithms for accuracy and operational relevance * Bridge the gap between defensive operations and software engineering by conducting training sessions and walkthroughs using simulated SOC scenarios * Participate in sprint planning and product roadmap discussionsto ensure the "operator perspective" is baked into software requirements * Provide input on UI/UX for analyst efficiencyand reduce cognitive load during high-stress alerts ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [How I saved 200K/yr in direct costs writing 0 code lines in K8s](https://www.wearedevelopers.com/videos/1055-how-i-saved-200k-yr-in-direct-costs-writing-0-code-lines-in-k8s) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)