Cybersecurity Analyst

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 10 or more years of relevant cybersecurity experience. \n
• Significant experience performing cybersecurity analysis, information assurance, vulnerability analysis, cybersecurity compliance, or enterprise risk assessment. \n
• Experience correlating information from multiple cybersecurity data sources to identify and prioritize enterprise security risks. \n
• Experience analyzing vulnerability-scanning results, intrusion-detection information, SIEM data, security-assessment findings, or comparable cybersecurity data. \n
• Experience identifying vulnerabilities, security misconfigurations, and deviations from approved security baselines. \n
• Experience evaluating cybersecurity findings based on technical severity, exploitability, threat information, and mission impact. \n
• Experience developing risk-reduction, mitigation, and cybersecurity-compliance recommendations. \n
• Working knowledge of Department of Defense cybersecurity requirements, security standards, and enterprise cybersecurity practices. \n
• Experience developing technical analysis, recurring cybersecurity reports, executive summaries, or risk-posture assessments. \n
• Ability to communicate complex cybersecurity risk and technical findings clearly to both technical and non-technical Government stakeholders. \n
• Active Secret security clearance required. \n, * Experience supporting Department of Defense cybersecurity programs or large Federal enterprise environments. \n
• Experience conducting enterprise cybersecurity risk and compliance analysis across multiple systems or authorization boundaries. \n
• Experience integrating vulnerability, threat, security-monitoring, and compliance information into a consolidated assessment of cybersecurity posture. \n
• Experience developing recurring cybersecurity risk, compliance, vulnerability, or executive-level reporting. \n
• Experience with enterprise vulnerability-scanning, intrusion-detection, SIEM, and cybersecurity assessment capabilities. \n
• Experience supporting Tier 3 cybersecurity analysis or troubleshooting. \n
• Familiarity with the Department of Defense Risk Management Framework and continuous-monitoring processes. \n
• Experience providing cybersecurity recommendations directly to Government technical or program leadership. \n
• Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments. \n

• DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. \n
• The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). \n
• The Senior Cybersecurity Analyst will work across this environment to turn cybersecurity monitoring, vulnerability, compliance, threat, and assessment data into an enterprise view of cyber risk. The role is focused on identifying where risk exists, determining its significance to the mission, and providing Government leadership with prioritized recommendations for reducing that risk. \n

\n \nPrimary Tasks \n \n \n

• Perform comprehensive cybersecurity analysis supporting the management and continued maturation of the DHRA cybersecurity program. \n
• Correlate and analyze cybersecurity data from vulnerability scanners, intrusion detection systems, Security Information and Event Management (SIEM) platforms, red-team assessments, and other Government-provided cybersecurity tools. \n
• Identify vulnerabilities, security misconfigurations, control deficiencies, and deviations from approved security baselines. \n
• Evaluate cybersecurity findings based on severity, exploitability, exposure, and potential mission impact rather than treating individual technical findings in isolation. \n
• Analyze multiple sources of cybersecurity data to identify recurring issues, systemic weaknesses, risk trends, and conditions requiring enterprise-level attention. \n
• Incorporate Department of Defense, DHRA, Government, and open-source threat information into assessments of the enterprise cybersecurity risk posture. \n
• Assess the relationship between identified technical vulnerabilities and relevant threat activity to improve prioritization of remediation efforts. \n
• Develop actionable recommendations for vulnerability mitigation, risk reduction, cybersecurity compliance, and security-posture improvement. \n
• Develop and support the monthly DHRA Cybersecurity Risk Reduction and Compliance Report, providing Government stakeholders with clear visibility into enterprise risk, significant findings, trends, and recommended actions. \n
• Support cybersecurity scanning, mitigation, compliance analysis, and assessment of adherence to Government cybersecurity standards and requirements. \n
• Evaluate cybersecurity products, capabilities, configurations, and technical approaches as required to support enterprise risk-reduction activities. \n
• Perform senior-level troubleshooting and analysis of complex cybersecurity issues that require coordination across system owners, cybersecurity personnel, engineers, administrators, and other technical stakeholders. \n
• Review technical findings and supporting evidence to ensure cybersecurity risks and compliance issues are accurately characterized before escalation or reporting. \n
• Support development of technical briefings, analytical products, and recommendations for Government cybersecurity and program leadership. \n
• Track significant cybersecurity findings and risk-reduction recommendations to support visibility into remediation progress and continuing areas of concern. \n, Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com. \n \n If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission. \n \n \nCommitment to Non-Discrimination \n \n All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws. \n \n #Remote”, “hiringOrganization”: {“@type”: “Organization”, “name”: “Leidos”, “logo”: “https://jobs.military.com/attachments/employer/0/962/152/273.svg”}, “jobLocation”: {“address”: {“addressCountry”: “United States”, “streetAddress”: “Not specified”, “@type”: “PostalAddress”, “postalCode”: “22314”, “addressLocality”: “Alexandria”, “addressRegion”: “Virginia - VA”}, “@type”: “Place”}, “industry”: “Information”, “identifier”: {“@type”: “PropertyValue”, “name”: “Leidos”, “value”: “R-00196491”}, “baseSalary”: {“@type”: “MonetaryAmount”, “currency”: “USD”, “value”: {“minValue”: “107900”, “@type”: “QuantitativeValue”, “maxValue”: “195050”, “value”: “107900”, “unitText”