Senior Cybersecurity Analyst

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

If this sounds like a mission you want to be a part of, keep reading!

Leidos is seeking an experienced Senior Cybersecurity Analyst to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC. The Senior Cybersecurity Analyst will perform enterprise-level cybersecurity analysis to identify vulnerabilities, configuration weaknesses, compliance issues, and emerging risks across the DHRA environment. This position will correlate information from multiple cybersecurity sources, assess findings in the context of mission impact and threat activity, and develop actionable risk-reduction and compliance recommendations for Government stakeholders.

Work Location: Department of Defense Center - Monterey Bay, Seaside, California

Mission Environment

• DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data.
• The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS).
• The Senior Cybersecurity Analyst will work across this environment to turn cybersecurity monitoring, vulnerability, compliance, threat, and assessment data into an enterprise view of cyber risk. The role is focused on identifying where risk exists, determining its significance to the mission, and providing Government leadership with prioritized recommendations for reducing that risk.

Primary Tasks

• Perform comprehensive cybersecurity analysis supporting the management and continued maturation of the DHRA cybersecurity program.
• Correlate and analyze cybersecurity data from vulnerability scanners, intrusion detection systems, Security Information and Event Management (SIEM) platforms, red-team assessments, and other Government-provided cybersecurity tools.
• Identify vulnerabilities, security misconfigurations, control deficiencies, and deviations from approved security baselines.
• Evaluate cybersecurity findings based on severity, exploitability, exposure, and potential mission impact rather than treating individual technical findings in isolation.
• Analyze multiple sources of cybersecurity data to identify recurring issues, systemic weaknesses, risk trends, and conditions requiring enterprise-level attention.
• Incorporate Department of Defense, DHRA, Government, and open-source threat information into assessments of the enterprise cybersecurity risk posture.
• Assess the relationship between identified technical vulnerabilities and relevant threat activity to improve prioritization of remediation efforts.
• Develop actionable recommendations for vulnerability mitigation, risk reduction, cybersecurity compliance, and security-posture improvement.
• Develop and support the monthly DHRA Cybersecurity Risk Reduction and Compliance Report, providing Government stakeholders with clear visibility into enterprise risk, significant findings, trends, and recommended actions.
• Support cybersecurity scanning, mitigation, compliance analysis, and assessment of adherence to Government cybersecurity standards and requirements.
• Evaluate cybersecurity products, capabilities, configurations, and technical approaches as required to support enterprise risk-reduction activities.
• Perform senior-level troubleshooting and analysis of complex cybersecurity issues that require coordination across system owners, cybersecurity personnel, engineers, administrators, and other technical stakeholders.
• Review technical findings and supporting evidence to ensure cybersecurity risks and compliance issues are accurately characterized before escalation or reporting.
• Support development of technical briefings, analytical products, and recommendations for Government cybersecurity and program leadership.
• Track significant cybersecurity findings and risk-reduction recommendations to support visibility into remediation progress and continuing areas of concern.

Basic Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 10 or more years of relevant cybersecurity experience.
• Significant experience performing cybersecurity analysis, information assurance, vulnerability analysis, cybersecurity compliance, or enterprise risk assessment.
• Experience correlating information from multiple cybersecurity data sources to identify and prioritize enterprise security risks.
• Experience analyzing vulnerability-scanning results, intrusion-detection information, SIEM data, security-assessment findings, or comparable cybersecurity data.
• Experience identifying vulnerabilities, security misconfigurations, and deviations from approved security baselines.
• Experience evaluating cybersecurity findings based on technical severity, exploitability, threat information, and mission impact.
• Experience developing risk-reduction, mitigation, and cybersecurity-compliance recommendations.
• Working knowledge of Department of Defense cybersecurity requirements, security standards, and enterprise cybersecurity practices.
• Experience developing technical analysis, recurring cybersecurity reports, executive summaries, or risk-posture assessments.
• Ability to communicate complex cybersecurity risk and technical findings clearly to both technical and non-technical Government stakeholders.
• Active Secret security clearance required.

Preferred Qualifications

• Experience supporting Department of Defense cybersecurity programs or large Federal enterprise environments.
• Experience conducting enterprise cybersecurity risk and compliance analysis across multiple systems or authorization boundaries.
• Experience integrating vulnerability, threat, security-monitoring, and compliance information into a consolidated assessment of cybersecurity posture.
• Experience developing recurring cybersecurity risk, compliance, vulnerability, or executive-level reporting.
• Experience with enterprise vulnerability-scanning, intrusion-detection, SIEM, and cybersecurity assessment capabilities.
• Experience supporting Tier 3 cybersecurity analysis or troubleshooting.
• Familiarity with the Department of Defense Risk Management Framework and continuous-monitoring processes.
• Experience providing cybersecurity recommendations directly to Government technical or program leadership.
• Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.