{"id":1478960,"url":"https://alion.io/job/leidos-cyber-fusion-analyst-2","title":"Cyber-Fusion Analyst","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":309,"ghost_share":0.003,"stale_share":0.89,"repost_share":0.01,"time_to_fill_p50_days":28,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Shiloh, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":87100,"max":157450,"currency":"USD","period":"year","gross":null,"usd_annual":157450},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomali","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Diamond Model","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"ThreatConnect","optional":false}],"status":"closed","first_seen_at":"2026-09-29T19:31:12Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-11T05:28:41Z","board_verified":false,"closed_at":"2026-10-11T05:28:41Z","days_open":11,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":11},"description":"Join the cyber-fusion team defending the nation's classified networks and Top-Secret mission systems. As a Cyber-Fusion Analyst, you'll operate at the intersection of cyber operations and intelligence, providing critical threat intelligence and incident response support to protect DoD, Intelligence Community, and Combatant Command networks at the highest classification levels.\nYour Mission\nClassified Threat Intelligence Operations:\nMonitor and analyze the global cyber threat landscape using classified Intelligence Community reporting, DoD intelligence products, and open-source intelligence to identify threats targeting TS/SCI networks and mission systems\nSynthesize complex, multi-source intelligence into actionable products for senior leadership and operational teams defending classified infrastructure\nDevelop comprehensive threat intelligence products including:\nNation-state and APT threat profiles with classified attribution and capability assessments\nMonthly and quarterly intelligence assessments on threats to classified networks\nStrategic intelligence reports on adversary campaigns targeting sensitive DoD and IC systems\nLeverage classified intelligence sources to provide early warning of threats to Top Secret mission operations\nOperational Cyber Defense:\nProvide real-time threat intelligence support during active incidents on classified networks\nSupport continuous threat hunting operations to proactively identify adversary presence in TS/SCI environments\nConduct threat and vulnerability analysis specific to classified network architectures and mission systems\nDevelop security advisories and tactical recommendations for protecting sensitive, compartmented information systems\nDisseminate time-sensitive threat intelligence to DISA, mission partners, and Intelligence Community stakeholders through classified channels\nIntelligence Community Collaboration:\nServe as a liaison between cyber operations and Intelligence Community partners\nParticipate in classified threat intelligence sharing initiatives and working groups\nContribute to all-source intelligence fusion efforts combining SIGINT, HUMINT, and cyber threat data\nApply advanced analytical frameworks (MITRE ATT&CK for ICS, Cyber Kill Chain, Diamond Model) to classified threat analysis\nPlatform & Capability Development:\nContribute to the development and enhancement of classified Threat Intelligence Platforms\nIdentify patterns and anomalies in complex, multi-source datasets from classified networks\nDevelop new analytical methods and intelligence products tailored to TS/SCI mission requirements\nMentor team members and foster a collaborative intelligence-sharing culture\nWhat You Bring\nRequired Qualifications:\nActive Top-Secret clearance \nCurrent DoD 8570 IAT Level II baseline certification (Security+ CE or higher)\nStrong understanding of:\nNetwork protocols, operating systems, and the OSI model\nSecurity technologies deployed in classified environments\nClassified network architectures and security requirements\nExceptional written and verbal communication skills, including:\nAbility to produce clear, concise intelligence reports and briefings for senior leadership\nExperience presenting complex threat information to diverse audiences including flag officers and SES-level officials\nAdvanced analytical skills:\nPattern recognition and anomaly detection in complex, multi-source datasets\nLogical reasoning and intelligence-driven analysis\nCritical thinking applied to ambiguous threat scenarios\nExperience gathering and analyzing intelligence from open-source, commercial, and classified sources\nProven ability to collaborate effectively with Intelligence Community partners and joint cyber teams\nHighly Desired Qualifications:\n4+ years of experience in cyber threat intelligence analysis, threat hunting, or incident response within classified environments\nExperience working with Intelligence Community partners on threat intelligence sharing and fusion initiatives\nHands-on experience with malware analysis tools and techniques (static and dynamic analysis)\nProficiency with Threat Intelligence Platforms (ThreatConnect, Anomali, MISP, or similar)\nDeep knowledge of intelligence-driven frameworks:\nMITRE ATT&CK (Enterprise, ICS, Mobile)\nCyber Kill Chain\nDiamond Model of Intrusion Analysis\nF3EAD targeting methodology\nExperience analyzing nation-state threat actors and Advanced Persistent Threats (APTs)\nUnderstanding of Intelligence Community Directives (ICDs) and intelligence oversight requirements\nFamiliarity with SIGINT, HUMINT, or GEOINT integration with cyber threat intelligence\nAdvanced certifications: GCTI, GCIA, GCFA, CISSP, or GIAC\nWhy This Role Matters\nYou'll be part of a team protecting the nation's most sensitive networks and mission-critical systems. Your intelligence analysis will directly support:\nCombatant Command operations in contested cyber environments\nIntelligence Community missions requiring the highest levels of security\nNational security decision-making at the strategic level\nWarfighter protection through advanced threat intelligence\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nSeptember 29, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $87,100.00 - $157,450.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":6155,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","C4ISR","Defense Manufacturing","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-09-29T19:31:12Z"},{"event":"close","at":"2026-10-11T05:28:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":null,"pay":{"stated_usd_annual":157450,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-cyber-fusion-analyst-2","json_url":"https://alion.io/job/leidos-cyber-fusion-analyst-2.json","meta":{"generated_at":"2026-11-06T12:21:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22426,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-cyber-fusion-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-cyber-fusion-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-cyber-fusion-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-cyber-fusion-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-cyber-fusion-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1478960}},{"tool":"search_jobs","arguments":{"company":"leidos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1478960},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}