Leidos has a current job opportunity for a Cyber Security Tools Analyst for the DISA GSM-O program in Columbus, OH.

A successful candidate will support a dynamic team to identify requirements and lead change to Cyber Security programs and tools for DISA and its DOD Mission Partners. Candidates should have cyber skills and knowledge and be able to operate independently and as part of a team. Candidates with experience in engineering security tools and developing advanced analytics in tools such as Splunk, Logstash, Kibana, LogBeats, AWS, and Azure will be able to apply this knowledge to improve the monitoring and defense of the network.

POSITION SUMMARY:
This position will support the DISA GSM-O Task Order 09 Network Assurance (NA) Program. The selected candidate will provide support for Security Analysts and will be expected to actively engage with personnel, partner with them, anticipate their needs, and deliver innovating solutions to challenging defensive cybersecurity issues.

PRIMARY RESPONSIBILITIES:

• Research advanced analytics, dashboards, exploits and associated detections and develop solutions

• Coordinate and collaborate with government stakeholders to help integrate new capabilities into operations

• Actively participate in meetings with CSSP subscribers and DISA working groups

• Train and mentor other team members

• QA/QC products before they are sent to the customer

• Develop whitepapers, briefs, SOPs, TTPs, and QRGs to allow for a better, more reliable DCO process

• Take ownership of driving the operations of the CSSP

• Conduct and deliver weekly status updates to customer

• Follow up on all taskers and due outs

BASIC QUALIFICATIONS:
• DoD 8570 IAT level II or higher certification such as CompTIA Security+ CE, ISC2 SSCP, SANS GSEC prior to starting

• DoD 8570 CSSP-A level Certification such as CEH, CySA+, GCIA or other certification is required within 180 days of hire

• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security domain and an ability to think and work independently

• Bachelor's degree and more than 2 years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of degree
• Strong written and oral communications skills and strong analytical and troubleshooting skills
• Willing to perform shift work
• Must be a US Citizen
• Must have an active DoD Secret security clearance and be able to possess a Top-Secret w/ SCI clearance

PREFERRED QUALIFICATIONS:

• Experience with data brokering

• Experience with cloud cybersecurity services

• Subject matter expertise in Elasticsearch, Logstash, Kibana (ELK) system engineering and implementation

• Subject matter expertise in Splunk

• Experience supporting DISA CSSP subscriber and provider validation programs

• Skilled in building extended cyber security analytics

• Experience with DISA and DoD Networks

• Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership

• Advanced Certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP

• Experience in intelligence driven defense and/or cyber Kill Chain or MITRE ATT&CK Frameworks

• Subject matter expertise in Joint Regional Security Stack

• Foster and encourage a collaborative environment to champion a cybersecurity culture