Senior DCO Analyst

The Leidos Digital Modernization Sector has an opening for a Sr. Defensive Cyber Operations Analyst on the GSM-O II program supporting the DISA Joint Operations Center (D2OC) at Fort Meade, Maryland.

Program Summary:

GSM-O II enables Current Operations Command, Control, and Defensive Cyber Operations (DCO) functions across all - Combatant Commands, Service Cyber Components, Agencies, and Field Activities’ (CC/S/A/FAs) Area of Operations (AOs) in addition to 24/7 coordination with USCYBERCOM and other partner agencies.

Primary Responsibilities:

• Execute continuous network monitoring and incident handling/problem resolution.
• Triage events, incidents, and assist with developing AO specific trends.
• Support various collaborative and cross functional forums (Intelligence, Current Operations, Future Operations, Logistics, Planning, Resourcing and Requirements) to achieve centrally coordinated, threat informed and prioritized vulnerability scoring and mitigation methodology.
• Support the development, coordination, release, and compliance of orders
• Provide threat analysis, track relevant prioritized incidents, and provide recommendations in coordination with the Cross Functional Fusion Team.
• Leverage intelligence and operational data, information, and processes to identify threats, improve security, and reduce the enterprise’s exposure to vulnerabilities.
• Identify problems, determine accuracy and relevance of a broad range of technical information. Use sound judgment to generate, evaluate, and execute alternative courses of action. Produce timely, effective, decision-quality technical recommendations to support senior leadership.
• Actively engage with a variety of customers and mission partners, anticipating their needs, and delivering flawlessly.

Required Qualifications:

• Bachelor's degree in a related discipline with 8+ years of applicable combined education and experience; additional related years of experience is accepted in lieu of a degree.
• Active DoD TS/SCI Clearance
• Must have a DoD-8140 WRC 511 Intermediate certification (see list below for acceptable certifications) to start.
• SIEM Tool Experience (ArcSight, Splunk, Elastic, etc..)
• Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques and cyber threat/adversary methodologies (TTPs)
• Computer Network Defense (CND) experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization. Requires a deep understanding and the ability to apply cyber security related principles, theories, and concepts.
• Work independently and as part of a team to develop solutions to issues that are unclear and require deep technical knowledge.

Preferred Qualifications:

• Experience with DISA/DCDC and DoD Networks.
• Knowledge of the DoD orders process
• Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Experience in building extended cyber security analytics.
• Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intelligence driven defense and/or Cyber Kill Chain methodology.
• Experience with User Acceptance Testing (UAT)

WRC 511 Intermediate Certifications

• CEH(P)
• GMON
• GRID
• Cloud+
• FITSP-O
• GCED
• GDSA
• GSEC
• PenTest+
• Security+

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.