Advanced Threat Detection Analyst
Share
Job Location:
Whitehall, OH - USA
Monthly Salary:
$ 107900 - 195050
Posted on:
Yesterday
Vacancies:
1 Vacancy
Job Summary
Leidos has a job opportunity for a Advanced Threat Detection Analyst expected to start in March 2026. This is a hybrid position allowing a 50/50 remote/onsite split and can work out of any of our three locations: Hill AFB Scott AFB or Whitehall OH. Candidates must be within commuting distance (or prepared to self-relocate) to one of these locations.
This position supports the Defense Information Systems Agency (DISA) GSM-O II program and its global Defensive Cyber Operations (DCO) organization. As a key leader you will lead a Advanced Threat Detection team in providing critical network operations and cyber defense for stakeholders including Cyber Security Service Provider (CSSP) Customers the Department of War (DoW) Information Network and Combatant Commands.
You will be responsible for overseeing daily threat hunting operations developing cyber threat intelligence products and investigating adversary indicators. This role involves leading your team in incident handling network analysis threat detection and trend analysis while also serving as a subject matter expert on advanced threat intelligence principles.
Primary Responsibilities
- Strategic Threat Intelligence Leadership: Serve as a subject matter expert on advanced threat intelligence principles (e.g. Cyber Kill Chain MITRE ATT&CK) influencing the development of solutions that impact strategic program goals. Develop and recommend new technical standards and products to support the organizations cyber defense strategy.
- Innovative Solution Development: Resolve highly complex problems by conceptualizing researching and integrating best practices. Lead the development of highly innovative solutions such as custom signatures and advanced correlation logic by interpreting threat actor tactics techniques and procedures (TTPs).
- Executive Communication & Influence: Communicate matters of significant importance to executive leadership both internally and with the client. Deliver authoritative threat briefs to senior leaders and work to convince stakeholders to accept and adopt new concepts practices and security approaches.
- Team Leadership & Management: Lead and manage the work of other technical staff including mentoring and training fusion analysts on advanced TTPs. Ensure the teams work on incident handling event triage and network analysis has a significant and positive impact on project results and outputs.
- Advanced Operational Collaboration: Drive daily coordination with the DISA Global Countermeasures Team and external agencies. Ensure the seamless integration of threat intelligence into countermeasures to proactively detect prevent and mitigate intrusions and malware infections across the enterprise.
- Process & Documentation Oversight: Direct the creation and maintenance of all process documentation for the fusion team ensuring that operational standards align with strategic objectives and reflect industry best practices.
Required Qualifications:
- Clearance:Minimum active DoD Secret clearance with the ability to obtain and maintain a TS/SCI.
- Certification:Current DoD 8570 IAT Level II (or higher) such as CompTIA Security CE ISC2 SSCP or SANS GSEC.
- Education & Experience:Requires a BS degree and 812 years of prior relevant experienceORa Masters with 6 - 8 years of prior relevant experience. A Doctorate may also be considered.
- Leadership Experience:4 years of formal or informal leadership experience.
- Cybersecurity Experience:8 years of cybersecurity experience with an in-depth understanding of advanced computer defense technologies.
- Expertise in the following areas:
- Proven ability to develop innovative solutions by researching and integrating best practices.
- Demonstrated experience using frameworks like the Cyber Kill Chain and MITRE ATT&CK to influence strategic goals.
- Ability to lead and manage the work of a technical multi-site team.
- Excellent verbal and written communication skills with experience influencing executive leadership.
Preferred Qualifications:
- Experience working for a Cybersecurity Service Provider (CSSP) or Security Operations Center (SOC).
- Knowledge of Threat Hunting practices techniques and Advanced Persistent Threats (APTs).
- Advanced knowledge of a prominent Security Information and Event Management (SIEM) tool (e.g. Splunk Elasticsearch).
If youre looking for comfort keep scrolling. At Leidos we outthink outbuild and outpace the status quo because the mission demands it. Were not hiring followers. Were recruiting the ones who disrupt provoke and refuse to fail. Step 10 is ancient history. Were already at step 30 and moving faster than anyone else dares.
Original Posting:
January 30 2026For U.S. Positions: While subject to change based on business needs Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:
Pay Range $107900.00 - $195050.00The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.
Required Experience:
IC
Key Skills
- ArcGIS
- Intelligence Community Experience
- GIS
- Python
- Computer Networking
- Data Collection
- Intelligence Experience
- R
- Relational Databases
- Analysis Skills
- Data Management
- Application Development
About Company
Leidos is an innovation company rapidly addressing the world's most vexing challenges in national security and health. Our 47,000 employees collaborate to create smarter technology solutions for customers in these critical markets.
