Advanced Threat Detection Analyst

R-00174848

Description

Leidos has a job opportunity for a Advanced Threat Detection Analyst expected to start in March 2026. This is a hybrid position allowing a 50/50 remote/onsite split, and can work out of any of our three locations: Hill AFB, Scott AFB, or Whitehall OH. Candidates must be within commuting distance (or prepared to self-relocate) to one of these locations.

This position supports the Defense Information Systems Agency (DISA) GSM-O II program and its global Defensive Cyber Operations (DCO) organization. As a key leader, you will lead a Advanced Threat Detection team in providing critical network operations and cyber defense for stakeholders including Cyber Security Service Provider (CSSP) Customers, the Department of War (DoW) Information Network, and Combatant Commands.

You will be responsible for overseeing daily threat hunting operations, developing cyber threat intelligence products, and investigating adversary indicators. This role involves leading your team in incident handling, network analysis, threat detection, and trend analysis, while also serving as a subject matter expert on advanced threat intelligence principles.

Primary Responsibilities

• Strategic Threat Intelligence Leadership: Serve as a subject matter expert on advanced threat intelligence principles (e.g., Cyber Kill Chain, MITRE ATT&CK), influencing the development of solutions that impact strategic program goals. Develop and recommend new technical standards and products to support the organization's cyber defense strategy.
• Innovative Solution Development: Resolve highly complex problems by conceptualizing, researching, and integrating best practices. Lead the development of highly innovative solutions, such as custom signatures and advanced correlation logic, by interpreting threat actor tactics, techniques, and procedures (TTPs).
• Executive Communication & Influence: Communicate matters of significant importance to executive leadership, both internally and with the client. Deliver authoritative threat briefs to senior leaders and work to convince stakeholders to accept and adopt new concepts, practices, and security approaches.
• Team Leadership & Management: Lead and manage the work of other technical staff, including mentoring and training fusion analysts on advanced TTPs. Ensure the team's work on incident handling, event triage, and network analysis has a significant and positive impact on project results and outputs.
• Advanced Operational Collaboration: Drive daily coordination with the DISA Global Countermeasures Team and external agencies. Ensure the seamless integration of threat intelligence into countermeasures to proactively detect, prevent, and mitigate intrusions and malware infections across the enterprise.
• Process & Documentation Oversight: Direct the creation and maintenance of all process documentation for the fusion team, ensuring that operational standards align with strategic objectives and reflect industry best practices.

Required Qualifications:

• Clearance: Minimum active DoD Secret clearance with the ability to obtain and maintain a TS/SCI.
• Certification: Current DoD 8570 IAT Level II (or higher), such as CompTIA Security+ CE, ISC2 SSCP, or SANS GSEC.
• Education & Experience: Requires a BS degree and 8–12 years of prior relevant experience, OR a Master's with 6 - 8 years of prior relevant experience. A Doctorate may also be considered.
• Leadership Experience: 4+ years of formal or informal leadership experience.
• Cybersecurity Experience: 8+ years of cybersecurity experience with an in-depth understanding of advanced computer defense technologies.
• Expertise in the following areas:
  • Proven ability to develop innovative solutions by researching and integrating best practices.
  • Demonstrated experience using frameworks like the Cyber Kill Chain and MITRE ATT&CK to influence strategic goals.
  • Ability to lead and manage the work of a technical, multi-site team.
  • Excellent verbal and written communication skills, with experience influencing executive leadership.

Preferred Qualifications:

• Experience working for a Cybersecurity Service Provider (CSSP) or Security Operations Center (SOC).
• Knowledge of Threat Hunting practices, techniques, and Advanced Persistent Threats (APTs).
• Advanced knowledge of a prominent Security Information and Event Management (SIEM) tool (e.g., Splunk, Elasticsearch).

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.
Original Posting: January 30, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range: Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com .

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission .

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.