Cyber Network Defense Team Lead

Leidos is seeking an experienced Cyber Network Defense Team Lead to support the Indo-Pacific Logistics and Sustainment Services (ILS2) program in Aiea, Hawaii. This position supports our customers’ mission to protect Information Technology (IT) networked systems and services throughout the Indo-Pacific region from evolving cyber threats. As part of a 24x7 mission-critical cyber defense operation, the Cyber Network Defense Team Lead provides senior-level technical expertise and operational leadership to help detect, analyze, respond to, and mitigate cyber threats and maintain the security and resilience of mission-critical networks.

The Cyber Network Defense Team Lead serves as a senior technical lead responsible for coordinating 24x7 cyber network defense operations while remaining actively engaged in hands-on cyber defense activities. The Team Lead guides cyber network defense analysts in detecting, investigating, analyzing, and responding to cyber events; monitors security tools and network activity for malicious behavior; and develops response and mitigation recommendations. The successful candidate will be a self-starter capable of independently executing complex technical tasks while effectively leading and collaborating across a highly coordinated, mission-focused team. This position also serves as a key interface with customers, program leadership, and technical teams to communicate cyber events, operational status, trends, risks, and recommended courses of action.

Primary Responsibilities.

• Manage technical support projects or tasks in accordance with contract requirements, appropriate policies, procedures, and guidelines.
• Manage the team and 24x7 schedule of technical cyber network defense analyst that investigate and analyze cyber events.
• Interface with customers, technical staff, team members, and management to identify issues, negotiate changes, meet deadlines, and provide strong customer service both orally and in writing, as appropriate.
• Generate daily, monthly, quarterly, yearly reports for customers involving project updates, metrics and ticketing trends.
• Generate weekly status reports for the Program Manager to include projected and accomplished objectives.
• Perform senior-level computer network incident detection and response activities to detect, correlate, identify and characterize anomalous activity that may be indicative of threats to the enterprise.
• Monitor various security tools and applications for possible malicious activities, perform senior-level investigations into any associated alerts or indicators, and develop recommendations for a course of action, including mitigation strategies if required.
• Possess good technical writing skills as each event, including the associated analysis, must be documented in a ticketing system so that it can be reviewed and acted on appropriately.
• Possess excellent communication skills as we are collocated with our customer and regular face-to-face interaction is required throughout the day.
• Follow Standard Operating Procedures (SOPs) and perform their duties with a high degree of attention to detail, ensuring that all system checks are performed in a timely manner and all documentation is complete and accurate.
• Influence project/team leaders regarding solution design, process and/or approaches.
• Review analyses, reports, and communications of juniors and peers to ensure accuracy and clarity of communications.
• Develop and conduct briefings to senior leaders.

• Bachelor’s Degree and 12+ yrs of experience; additional years of experience may be substituted in lieu of degree, including experience leading a team or effort.
• DoW 8570 IAT Level II (or Level III) Certification (e.g. Sec+ CE).
• DoW 8570 CSSP Analyst Certification (e.g. CEH), OR able to obtain one within 180 days of starting.
• DoW 8570 CSSP Infrastructure Support Certification (e.g. CEH, CySA+, SSCP), OR able to obtain one within 180 days of starting.
• Strong computing system knowledge, particularly networking, including a knowledge of communication protocols and familiarity with common computing security elements such as IDS/IPS systems and firewalls.
• Experience analyzing packet captures.
• Strong analytical, organizational, communication, and stakeholder management skills.
• Must be able to pass Yankee White clearance processing prior to start.
• Active TS/SCI security clearance required prior to start.
• Documenting analysis and providing response recommendations., * Prior CND experience.
• Familiarity with computing security frameworks such as cyber kill chain and att&ck.
• Monitoring of intrusion detection and computer defense appliances and applications, and analysis of associated alerts.
• Prior experience in the Indo-Pacific region.

Pay and benefits are fundamental to any career decision. That’s why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:Pay Range $131,300.00 - $237,350.00, Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.