Cloud Security Team Lead

Leidos is seeking a Cybersecurity Team Lead to direct a front-line team securing DoD multi-cloud (AWS, GCP, Oracle) and hybrid infrastructures. This is your opportunity to lead cybersecurity where it matters most, driving mission success and 24x7 operational readiness on major defense programs with a national impact. This position can sit in any of our three core sites - Columbus, OH; Scott AFB, IL; or Hill AFB, UT.

We value our leaders as much as our mission. Built for experienced, people-first managers, this role empowers you to mentor emerging technical talent, direct advanced alert triage, and influence operational strategy with senior leadership. We support your career growth with structured training and professional development pathways, all while prioritizing your work-life balance through a stable, standard five-day, 8-hour shift schedule.

PRIMARY RESPONSIBILITIES:

• Cyber Defense Operations: Direct a specialized team of 6-8 cybersecurity analysts, providing guidance and oversight across the following critical tasks:
  • Proactive Threat Monitoring: Drive the analysis and correlation of real-time DoD and open-source intelligence feeds. Guide your team in actively integrating threat intelligence (IOCs) into security sensors and enterprise SIEMs to intercept emerging threats.
  • Advanced Alert Triage: Oversee the investigation of security alerts across complex networks. Lead your analysts in leveraging endpoint telemetry, IDS/IPS, NetFlow, VPC Flows, and raw packet data to rapidly detect and report suspicious actors.
  • Multi-Cloud Correlation: Direct the analysis of extensive log files and security events across diverse, enterprise-scale multi-cloud environments (AWS, GCP, Oracle) to identify and prioritize suspicious behavior.
  • Incident Response Coordination: Partner with incident response teams and act as the key escalation point for customers and USCYBERCOM.
  • High-Impact Escalation & Reporting: Author thorough investigation reports detailing incident findings. Serve as the critical escalation point to customers and USCYBERCOM, ensuring a unified and timely response to critical security events.
• People-First Leadership: Act as a core mentor and strategic leader for your Team by focusing on the following
  • Cultivate Cyber Talent: Champion a positive, highly productive work culture through consistent employee engagement. Actively support your team's professional growth by partnering with senior leadership to manage ongoing training, performance reviews, and career advancement pathways.
  • Strategic Communication: Serve as the operational bridge between your analysts and the broader mission. Maintain transparent, highly effective communication across the chain of command, civilian personnel, and external customers to ensure daily operational success.
  • Drive Mission Effectiveness: Collaborate with senior leadership to clear operational roadblocks and align your team’s daily activities with long-term strategic goals. Ensure organizational policies and leadership directives are implemented smoothly and consistently.

BASIC QUALIFICATIONS:

Clearance & Certifications

• Security Clearance: Minimum active DoD Secret clearance, with eligibility to obtain a Top Secret (TS) clearance.
• Baseline Certification: Current DoD 8570 IAT Level II certification or higher (e.g., CompTIA Security+ CE, ISC2 SSCP, SANS GSEC, or equivalent).
• Specialty Certification: Ability to obtain a DoD 8570 CSSP-A Level Certification (e.g., CEH, CySA+, GCIA, or equivalent) within 180 days of hire.

Leadership & Professional Experience

• Leadership Background: A minimum of 2 years of formal management or equivalent team leadership experience.
• Education & Experience Levels: Bachelor's degree in a related discipline as well as 8+ years of directly relevant experience. Military service and equivalent professional work experience are highly valued and may be considered in lieu of a degree.

Technical Foundation & Core Attributes

• Network Security Expertise: Strong understanding of network traffic flow, packet analysis, ports, protocols, and defense-in-depth security.
• Strategic Problem Solving: Proven ability to collaborate effectively with cross-functional teams to tackle complex security challenges. Must be able to translate deep technical data into concise communications, build consensus, and drive incident solutions to completion.
• Professional Agility: Highly reliable and flexible, demonstrating a strong work ethic whether working independently or leading collaborative team efforts on assigned shifts.
• Continuous Improvement: Passionate about staying ahead of emerging threats, demonstrated through the ongoing pursuit of certifications, self-study, or active participation in cybersecurity forums.
• Location: Within a 2-hour commute (or willing to relocate) to Hill AFB, UT; Scott AFB, IL; or Columbus, OH.

PREFERRED QUALIFICATIONS (Stand-Out Candidates):

• DoD Ecosystem Experience: Prior experience working with DISA and/or DoD networks.
• Advanced Leadership: 2+ years specifically managing cross-functional cybersecurity or SOC teams.
• Enterprise SIEM Mastery: Operational mastery of enterprise-grade SIEM platforms (e.g., Splunk, Elastic, QRadar).
• Advanced Certifications: CCSP, CCSK, Cloud+, SANS GIAC (GCIA, GCIH, GLSC) or CompTIA CASP+.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.