Total 13 Logistic Analyst job vacancies in Legal / Public / Security category in Malaysia

Position Summary:

• This position is integral to the DISA GSM-O II program, where responsibilities include conducting cyber threat intelligence analysis, coordinating incident responses, and analyzing network traffic. The duration of this government contract extends until March 2030.

Primary Responsibilities:

• Review DoD and open-source intelligence for threats.
• Identify Indicators of Compromise (IOCs) and integrate them into sensors and SIEMs.
• Utilize alerts from various sources to identify compromises and conduct incident investigations.
• Collaborate effectively in a team environment.
• Articulate findings, updates, and analysis clearly.
• Generate detailed technical reports on analytic findings.

Work Schedule:

• Shift work required (4x10s), based on shift needs.
• Hybrid work environment (as coverage supports).

Basic Qualifications:

• DoD 8570 IAT level II or higher certification (CompTIA Security+ CE, ISC2 SSCP, SANS GSEC, etc.).
• CSSP-Analyst certification within 180 days of hire (CEH, CySA+, GCIA, Pentest+, etc.).
• Active DoD Secret clearance, able to obtain a Top Secret.
• US Citizenship required.
• Understanding of network threats, attack vectors, and intrusion tactics.
• Proficiency in TCP/IP, networking, system administration, and common security elements.
• Hands-on experience with log analysis and incident investigations.
• Commitment to continuous learning in cyber security.

Preferred Qualifications and Experience:

• Advanced degree(s) in technical field or relevant certifications.
• Experience with enterprise SIEM platforms (Elastic, Splunk, etc.).
• Familiarity with security tools and methodologies.
• Unix/Linux command line experience, scripting, and programming skills.
• Familiarity with DoD networks, military operations, and cyber kill chain methodology.
• Experience in malware analysis and Power Bi platform is a plus.
• Involvement in cybersecurity community activities such as CTF competitions, bug bounties, or cybersecurity training events is advantageous.

Salary Range:

• $75,000 to $130,000 based on experience, knowledge, education, and certifications.

Note: Military service is a plus.

gsmo

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

This position will support the DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN. GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DoD and COCOMs. The selected candidate shall provide a stabilizing force to the high intensity, high tempo operations center. In depth technical knowledge, management, and analytic skills address senior command requirements, subordinate command information requirements, as well as supplements operations during a time of need.

Primary Responsibilities

• Provide holistic enterprise defensive strategies for enterprise cyber security capabilities implemented within the infrastructure of the DODIN to include but not limited to Cloud, network boundaries, cross domains, and varying endpoint technologies.

• Provide analysis of architectures, technologies, policies, information and analytic data used to determine prevention, detection, and mitigation of anomalous activity, vulnerabilities and inefficiencies.

• Prepare and perform briefings appropriate for senior leadership (i.e., general officer or flag officer)

• Perform cyber situational awareness activities and provide analysis and recommendations of situation awareness capabilities.

• Provide enterprise-wide cybersecurity, threat analysis, countermeasures and defensive strategies across a multi-tiered, porous domain inclusive of Cloud, federated regional gateways, cross domain peering points, internet access points, and endpoints.

Basic Qualifications

• Bachelor's degree in a relevant technical discipline and 8+ years of prior relevant experience. 

• Currently possess an active DoD TS/SCI clearance and eligible for C/I Polygraph.

• Currently possess DoD 8750 certification at IAT level II, Security +ce.

• Experience at Joint Command and/or Operations Center.

• In-depth understanding of military orders and the military decision-making process.

• Proficient in Windows Desktop 7/ 8/ 8.1/ 10 

• Knowledge of Windows server 2003/ 2008/ 2012 R2 

• Ability to work in a virtual environment such as Microsoft Teams 

• Knowledge of and a proficiency in using Computer and Microsoft Office applications (Word, Excel, Access, Outlook) 

• Knowledge of policy development and maintenance 

• Strong communication and interpersonal skills, with the ability to speak clearly and effectively with customers and technical personnel in high-stress situations 

• A solid understanding of IP addressing and subnetting 

• Understanding of key network monitoring protocols 

• Proficient in Microsoft Office 365 Suite • Knowledge of Microsoft server operating systems, VMWare and Cisco network devices

Preferred Qualifications 

• Senior leader engagements

• Experience with DISA and DoD Networks

• Experience with technical and/or military writing

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

The Leidos Digital Modernization sector is continuously looking for cleared Cyber Security Analysts that are interested in join the DISA GSM-O II program in Columbus, OH. We hire for these roles on an ongoing basis and our recruiting team will contact applicants as positions become available.

POSITION SUMMARY:
This position provides 24x7 cybersecurity monitoring services for Department of Defense networks. This includes performing real-time cyber threat intelligence analysis, correlating actionable security events, performing network traffic analysis using raw packet data, and participating in the coordination of resources during the incident response process. There are three available shifts where you can state your preference: 7am-3pm, 3pm-11pm, and 11pm-7am.

PRIMARY RESPONSIBILITIES:

• Review DoD and open source intelligence for threats and to identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs.

• Utilize alerts from endpoints, IDS/IPS, netflow, and custom sensors to identify compromises on customer networks/endpoints. 

• Review massive log files, pivot between data sets, and correlate evidence for incident investigations, with the ability to create complex technical reports on analytic findings. 

• Triage alerts to identify malicious actors on customer networks.

• Report incidents to customers and USCYBERCOM.

BASIC QUALIFICATIONS:

• Minimum active DoD Secret clearance with ability to obtain TS/SCI

• Bachelor's degree and 4+ years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of degree.

• Demonstrated understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.

• Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.

• DoD 8570 IAT level II or higher certification such as CompTIA Security+ CE, ISC2 SSCP, SANS GSEC prior to starting.

• DoD 8570 CSSP-A level Certification such as CEH, CySA+, GCIA or other certification is required within 180 days of hire.

• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security domain and an ability to think and work independently

• Strong analytical and troubleshooting skills.

• Willing to perform shift work.

PREFERRED QUALIFICATIONS:

• CND experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.

• Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).

• Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.

• Demonstrated hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, Full Packet Capture), and other attack artifacts in support of incident investigations.

• In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. ArcSight, Splunk, Nitro/McAfee Enterprise Security Manager, QRadar, LogLogic).

• Experience and proficiency with any of the following: Anti-Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, Network Forensics.

• Experience with malware analysis concepts and methods.

• Unix/Linux command line experience.

• Scripting and programming experience.

• Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.

• Familiarity or experience in Intelligence Driven Defense and/or Cyber Kill Chain methodology.

• Existing 8570 CSSP Analyst Certifications (CEH), CySA+ etc.

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos has an excellent opportunity for an experienced, self-directed, Cyber Security Analyst, located in Stuttgart, Germany.   
 
PROGRAM SUMMARY:
This program provides critical Communications and Information Technology Services to support U.S. Africa Command, U.S. European Command, Combined Joint Task Force - Horn of Africa, Southern European Task Force, and associated staff elements and organizations.  It provides our war fighters support in their mission to keep threats and vulnerabilities as low as possible by ensuring their computer network is stable, undisrupted and secure. This will require some OCONUS travel.

PRIMARY RESPONSIBILITIES:
•Provide technical expertise to support the Combatant Command (CCMD) cybersecurity program and its functions IAW current architectures, which includes all hardware and software tools and sensors from perimeter to endpoint. 
•Review security threats and determines/implements effective countermeasures IAW established policies/regulations/directives. 
•Analyze network or system changes/reconfigurations for security impacts (performs risk analysis/assessment). 
•Monitor implemented security controls and report status. 
•Compile information and support required cyber evaluations, inspections, assessments, and reporting tasks. 
•Develop recommendations for counter measures or process improvement based on lessons learned from security incidents. 
•Provide exceptional technical expertise to support the Combatant Command (CCMD) cybersecurity program and its functions IAW current architectures which includes all hardware and software tools and sensors from perimeter to endpoint.   
•Reviews security threats and determines/implements effective countermeasures IAW established policies/regulations/directives. 
•Analyzes network or system changes/reconfigurations for security impacts (performs risk analysis/assessment). 
•Compile information and support required cyber evaluations, inspections, assessments, and reporting tasks. 
•Work in dynamic fast paced environments that require team interaction and coordination of efforts.   
•Interface with both client managers and system users. 
•Operate tools and systems that are required to support the Command's cybersecurity program. 
•Provide STIG Assessment to multiple Operating Environments. 
•Assist in the enhancement of AFRICOM's Cyber Threat Capability. 
•Provide focused operations/threat analysis on known intrusion sets. 
•Provide remote support and/or travel to customer sites as required. 
 
BASIC QUALIFICATIONS:
•BA/BS + 3 years recent specialized or AA/AS +5 years recent specialized or a major cert +7 years recent specialized or years of recent specialized experience 
•DOD 8570 IAM III compliance, CISM, CISSP (or Associate) GCED, GCIH.
•Working knowledge of supporting Operating Systems: Windows Server 2016/2019, Windows 10, VMWare vSphere, and Red Hat Enterprise Linux.
•In-depth experience with DoD IT security requirements. 
•TESA eligibility 
•Currently hold an adjudicated Top Secret/SCI Clearance. 

PREFERRED QUALIFICATIONS:
•ITIL v3 – Foundation.
•Experience with Bluecoat, McAfee HBSS, Splunk, CyberArk and Bitlocker, ACAS.
•Automation using Microsoft PowerShell, VBScript, or batch files.
•Adaptable to changing circumstances and operational needs.
•Understanding of Department of Defense Military standards. 

CITS3

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos has a current job opportunity for a Cyber Security Analyst on the DISA GSMO-II program in the Washington DC Area. 

Position Summary:
This position provides 24x7 cybersecurity monitoring and analysis services for Department of Defense networks above the SECRET level. This includes performing real-time cyber threat intelligence analysis, correlating actionable security events, performing network traffic analysis using raw packet data, and participating in the coordination of resources during the incident response process.

Primary Responsibilities:
•Review DoD and open source intelligence for threats and to identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs

•Utilize alerts from endpoints, IDS/IPS, netflow, and custom sensors to identify compromises on customer networks/endpoints

•Review massive log files, pivot between data sets, and correlate evidence for incident investigations
•Triage alerts to identify malicious actors on customer networks
•Report incidents to customers and USCYBERCOM
 

Basic Qualifications:
• Bachelors Degree and 8+ years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of a degree.

• Demonstrated understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.

•Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings

•DoD 8570 IAT level II or higher certification such as CompTIA Security+ CE, ISC2 SSCP, SANS GSEC prior to starting.

•DoD 8570 CSSP-A level Certification such as CEH, CySA+, GCIA or other certification is required within 180 days of hire.

•Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security domain and an ability to think and work independently

•Bachelor's degree and less than 2+ years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of degree.
•Strong analytical and troubleshooting skills
•Willing to perform shift work
•Must be a US Citizen
•Must have an active DoD TOP Secret security w/ SCI clearance eligibility.

Preferred Qualifications:

•CND experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.

•Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).

•Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.

•Demonstrated hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, Full Packet Capture), and other attack artifacts in support of incident investigations.

•In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. ArcSight, Splunk, Nitro/McAfee Enterprise Security Manager, QRadar, LogLogic).

•Experience and proficiency with any of the following: Anti-Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, Network Forensics.

•Experience with malware analysis concepts and methods.

•Unix/Linux command line experience.

•Scripting and programming experience.

•Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.

•Familiarity or experience in Intelligence Driven Defense and/or Cyber Kill Chain methodology.

•Existing 8570 CSSP Analyst Certifications (CEH), CySA+ etc.

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

This position will support the DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN.  GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DoD and COCOMs.  The selected candidate shall support the detection, monitoring, correlation, remediation, and prevention of cyber threat activity targeting the DODIN. Understand the details of advanced persistent threats that impact the DODIN with an in-depth knowledge and ability to analyze, track, correlate, trend, and report on the TTPs utilized and countermeasures to secure, operate and defend.

Primary Responsibilities

• Supervise the analyzing of identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information.
• Assess network topology and device configurations identifying critical security concerns and providing security best practice recommendations.
• Review, correlate, and report on high priority endpoint threats and vulnerabilities to identify similar incidents/events, malicious tradecraft, TTPs of malicious activity, and indicators utilized to impact or target specific networks. 
• Supervise the creation of situational awareness products to provide DoD components with detailed information related to vulnerabilities and appropriate mitigation strategies. 
• Develop and Present cyber threat briefings, presentations to ensure situational awareness and current status are conveyed to senior leaders.
• Coordinate with AOs and participate in meetings to ensure accuracy of scoping, requirements documentation, gap identification, remediation, and compliance requirements.
• Develop formalized reporting regarding threat and vulnerability activity impacting mission success. (i.e., situational awareness reports/products; operational directives/orders and coordination messages; and quarterly threat analysis reports and metrics.).
• Develop, and maintain the content of a DoD indicator database to aid in the detection and mitigation of threat activity.
• Define, establish, and manage security risk metrics and track effectiveness.

Basic Qualifications

• BA degree and 12+ years of applicable experience or a MA degree in a related discipline with 15+ years of applicable combined education and experience. Additional related years of experience is accepted in lieu of a degree
• Active DoD TS/SCI clearance and eligible for C/I Polygraph
• Must hold an active DoD 8570 IAM Level I/II certification.
• Previous tools experience working with endpoint detection and response tools (ESS, Cisco AMP, Cortex XDR, Forti EDR, Sophos, Carbon Black EDR)
• Technical understanding in some of the following areas: network communication using TCP/IP protocols, basic system administration, basic understanding of malware (malware communication installation, or malware types).
• Expert knowledge of computer network defense operations (proxy, firewall, IDS/IPS, router/switch, or open-source information collection)
• Expert knowledge of threat and vulnerability analysis, routing protocols, routing, intrusion detection systems, intrusion protection systems, Domain Name Service, or network traffic analysis.
• Advanced communications and presentations skills (verbal and written) enabling precise conveyance of information across all CC/S/A/FA with command and proper enunciation of the English language

Preferred Qualifications

• Security+ CE; CAP, GSLC, CISSP
• ITIL v3 Foundation certified

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

This position will support the DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN. GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DoD and COCOMs. The selected candidate shall provide a stabilizing force to the high intensity, high tempo operations center. In depth technical knowledge, management, and analytic skills address senior command requirements, subordinate command information requirements, as well as supplements operations during a time of need.

Primary Responsibilities

• Provide holistic enterprise defensive strategies for enterprise cyber security capabilities implemented within the infrastructure of the DODIN to include but not limited to Cloud, network boundaries, cross domains, and varying endpoint technologies.

• Provide analysis of architectures, technologies, policies, information and analytic data used to determine prevention, detection, and mitigation of anomalous activity, vulnerabilities and inefficiencies.

• Prepare and perform briefings appropriate for senior leadership (i.e., general officer or flag officer)

• Perform cyber situational awareness activities and provide analysis and recommendations of situation awareness capabilities.

• Provide enterprise-wide cybersecurity, threat analysis, countermeasures and defensive strategies across a multi-tiered, porous domain inclusive of Cloud, federated regional gateways, cross domain peering points, internet access points, and endpoints.

• Development of operational supporting documents such as SOPs, TTPs and CONOPs.

Basic Qualifications

• Bachelor's degree in a relevant technical discipline and 8 - 12 years of prior relevant experience or master’s degree with 6 – 10 years of prior relevant experience. 

• Currently possess an active DoD TS/SCI clearance and eligible for C/I Polygraph.

• Currently possess DoD 8750 certification at IAT level II, Security +ce.

• Experience at Joint Command and/or Operations Center.

• In-depth understanding of military orders and the military decision-making process.

• Proficient in Windows Desktop 7/ 8/ 8.1/ 10 

• Knowledge of Windows server 2003/ 2008/ 2012 R2 

• Ability to work in a virtual environment such as Microsoft Teams 

• Knowledge of and a proficiency in using Computer and Microsoft Office applications (Word, Excel, Access, Outlook) 

• Knowledge of policy development and maintenance 

• Strong communication and interpersonal skills, with the ability to speak clearly and effectively with customers and technical personnel in high-stress situations 

• A solid understanding of IP addressing and subnetting 

• Understanding of key network monitoring protocols 

• Proficient in Microsoft Office 365 Suite • Knowledge of Microsoft server operating systems, VMWare and Cisco network devices

Preferred Qualifications 

• Senior leader engagements

• Experience with DISA and DoD Networks

• Experience with technical and/or military writing

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos has an excellent opportunity for an experienced and self-directed Cyber Security Analyst to apply their knowledge with Tenable Assured Compliance Assessment Solution (ACAS) and its endpoint products such as Security Center, Nessus Scanner and Passive Vulnerability Scanner (PVS) and impact our nation’s security posture while helping to secure critical IT systems.  This position is in support of a Department of Defense (DoD) organization, US EUCOM located OCONUS in Molesworth, England.  

SUMMARY:
The successful candidate will support the Customer in the design and implementation of Assured Compliance Assessment Solution (ACAS) for the US EUCOM Enterprise Network (AEN), coordinating with internal Information Assurance personnel to maintain and operate the ACAS tool functionality, and operate and maintain the ACAS solution to support network and appliance scanning and configuration assessments.

PRIMARY RESPONSIBILITIES:

• Provide technical expertise to support the Combatant Command (CCMD) cybersecurity program and its functions IAW current architectures, which includes all hardware and software tools and sensors from perimeter to endpoint. 
• Implement and install ACAS (Nessus scanners and Security Centers) on AEN networks
• Provide expert level program management guidance and recommendations, planning, implementation, training, and execution of enterprise support for ACAS and other related tools.  Guidance shall include recommendations for best practice configuration of ACAS organizations, scan repositories, asset lists, scan profiles, etc.
• Provide and maintain a project schedule and a Plan of Action and Milestones (POA&M) document for the ACAS system as needed.
• Assist with automation and implementation of periodic vulnerability reporting from ACAS to other organizations.
• Produce the EUCOM Cyber specific documentation necessary for assessment and authorization of the system to achieve an Authority to Operate (ATO) in accordance with NIST guidelines (e.g. technical diagrams, Concept of Operations (CONOPS), DISA Security Technical Implementation Guidance (STIG) reports, Administrator and User Standard Operating Procedures (SOP) and manuals, training, baseline documentation, etc.).
• Support installation, configuration, and testing of new software releases as directed by the Government. Upon completion of functional testing, the candidate shall deliver a test report that documents test results.
• Communicate clearly and succinctly both written and orally, and present products and ideas in a business-like manner.  
• Work in dynamic fast paced environments that require team interaction and coordination of efforts.  
• Interface with both client managers and system users.
• Assist in the enhancement of EUCOM's Cyber Threat Capability.
• Develop and deliver specific deliverables associated with this support that are identified by the Government.
• Provide remote support and/or travel to customer sites as required.

Required Education and Qualifications:

• BA/BS + 4 years, AA/AS +5 years, major certification +7 years, or 9+ years of recent specialized experience
• Must hold and maintain active TS/SCI clearance.
• Must have a minimum of three years of experience working with Tenable Security Center and Tenable Nessus.
• DOD 8570 IAT II compliance
• Possess working knowledge of supporting Operating Systems: Windows Server 2012-2019 and Windows 10 and 11, VMWare vSphere, Red Hat Enterprise Linux
• Must have experience producing and reviewing scan policies, CONOPS, network diagrams at the enterprise level, and should be able to recommend appropriate locations for Security Center and Nessus scanner instances to ensure full network coverage.
• Possess in-depth experience with DoD IT security requirements
• TESA eligibility

Desired Qualifications:

• Experience with, PowerBI, CyberArk, Evaluate STIG
• Automation using Microsoft PowerShell
• Scripting (Nessus Attack Scripting Language (NASL), Python, Bash) (preferred)
• Adaptable to changing circumstances and operational needs.
• Understanding of Department of Defense Military standards

CITS3

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

The Litigation Support Team at Leidos currently supporting the U.S. Department of Justice (DOJ) in Los Angeles, CA has an opening for a Document Management Analyst  II – Legal Assistant (Litigation Support) to work in a downtown Los Angeles, CA DOJ office providing litigation support as part of our criminal prosecution team. This is an exciting opportunity to use your experience helping the U.S. Department of Justice achieve their mission. 

Responsibilities include:

•Complete various aspects of recurring legal documents.

•Use general reference sources and legal research tools to gather information to assist attorneys and staff in performing legal research duties.

• Search internal plus external files for material used in a variety of recurring reports.

• Assemble file data or secures data from staff members into the proper format based on the purpose and nature of the report.

• Accurately input data for the case and matter statistical management system.

• Independently review resource documents and files to determine appropriate codes for the case management system and work hour input and reports.

• Research and review the documents by consulting with the attorneys.

• Produce a variety of written documents utilizing a range of automation software.

• Assist with receiving, evaluating and producing discovery in the Document Management area.

• Identify potential sources of information that may be beneficial for the government's position in the case.

• Assist in organizing and processing information for efficient retrieval through automated means such as scanning, indexing, and organizing documents in a database.

Required Qualifications: 

- Bachelor's degree or 3 years of experience on major litigation support projects.

- Demonstrated ability to work independently in a team environment.

- Must be knowledgeable user of the Government's office and network environment, including but not limited to, word processing, database, spreadsheet, imaging, and telecommunications systems. 

- Must be a US Citizen and able to obtain and maintain a Public Trust clearance.

Desired Qualifications: 

- Experience working in a Government and/or Litigation Support environment.

- Familiarity with ESI tools and knowledge of eDiscovery procedures and resources  

- Current or active clearance

This position is covered under the Service Contract Act and is subject to minimum wage requirements as well as the minimum Health and Welfare benefit. Leidos will ensure that all provisions are met through their wages and benefits. The pay for this position will be $20.79/hr.

In 2023, Leidos was ranked as one of the “World's Most Ethical Companies” by the Ethisphere Institute for the sixth consecutive year. We were also ranked #2 on the Forbes’ list of Best Employers for Veterans and #26 on Careers & The Disabled Magazine’s list of Top 50 Employers for the Disabled!

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

The DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN has an opening for a FUTURE ROLE. 

Position Summary:

GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DOD and COCOMs.  In this role, you will provide support with incident handling, triage of events, network analysis, threat detection, trend analysis, metric development, and vulnerability information dissemination.

Primary Responsibilities:

• Leverage an array of network monitoring and detection capabilities (including netflow, custom application protocol logging, signature-based IDS, and full packet capture (PCAP) data) to identify cyber adversary activity.
• Support the development of Cyber Fusion standard operating procedures (SOPs), and Cyber Fusion Framework and Methodology based on industry best practice and department of defense instruction, guidance, and policy.
• Identify threats to the enterprise and provide mitigation strategies to improve security, and reduce the attack surface.
• Perform analysis by leveraging serialized threat reporting, intelligence product sharing, OSINT, and open source vulnerability information to ensure prioritized plans are developed.
• Analyze and document malicious cyber actors TTPs, providing recommendations and alignment to vulnerabilities and applicability to the enterprise operational environment.
• Discover adversary campaigns, anomalies and inconsistencies in sensor and system logs, SIEMs, and other data.
• Identify, investigate and rule out system compromises, with the capacity to provide written analytic summaries and attack life cycle visualizations.
• Provide risk assessments and recommendations based on analysis of technologies, threats, intelligence, and vulnerabilities.
• Offer recommendations to adjust enterprise or tactical countermeasures to for threats impacting the DODIN.
• Collect analysis metrics and trending data, identify key trends, and provide situational awareness on these trends.

Required Qualifications:

• Active DoD TS/SCI Clearance and eligible for polygraph
• Bachelor’s Degree in related discipline and 4+ years of related experience.  Additional experience may be accepted in lieu of degree
• Security+ Certification (or other equivalent DoD 8570 Level II certification)
• In-depth knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques and cyber threat/adversary methodologies.
• Proficiency with datasets, tools and protocols that support analysis (e.g. passive DNS, Virus Total, Recorded Future, TCP/IP, OSI, WHOIS, enumeration, threat indicators, malware analysis results, Wireshark, Splunk, Arcsight etc.).
• Experience with various open-source and commercial vendor portals, services and platforms that provide insight into how to identify and/or combat threats or vulnerabilities to the enterprise.
• Proficiency working with various types of network data (e.g. netflow, PCAP, custom application logs)

Preferred Qualifications:

• Experience with the DISN and other DOD Networks.
• Skilled in building extended cyber security analytics (Trends, Dashboards, etc.).
• Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Experience in intelligence driven defense and/or cyber Kill Chain methodology.
• IAT Level III and IAM Level II+III Certifications

GSM-O II TN07

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Unleash Your Potential 
At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customer’s success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. 

If this sounds like an environment where you can thrive, keep reading! 

We are in search of a Cybersecurity Analyst to join our Defense Group task force at the Scott Air Force Base, IL. As a valued member of the team, you are to perform cyber threat intelligence analysis, correlate actionable security events, perform network traffic analysis (using raw packet data), net flow, IDS, IPS, and custom sensor output as it pertains to the cyber security of communications networks, and participate in the coordination of resources during incident response efforts.

Your greatest work is ahead! 

The Mission 
The Defense Group provides a diverse portfolio of systems, solutions, and services covering land, sea, air, space, and cyberspace for customers worldwide. Solutions for Defense include enterprise and mission IT, large-scale intelligence systems, command and control, geospatial and data analytics, cybersecurity, logistics, training, and intelligence analysis and operations support. Our team is solving the world’s toughest security challenges for customers with “can’t fail” missions. From scanning for illicit material at ports and borders to predicting future events and instability up to five years in advance, our products help customers make the world safer.              

To explore and learn more, click here! 

Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today!

The Challenge: 

• Review DoD and open-source intelligence for threats.

• Identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs.

• Triage and review system alerts to identify malicious actors on customer networks.

• Assist T1 analysts with triage and analysis.

• Complete moderate-level analysis of potential cybersecurity events that could threaten IT Systems.

• Report incidents to customers and USCYBERCOM.

• Motivated self-starter with strong written and verbal communication skills. 

• Create complex technical reports on analytic findings.

What Sets You Apart:

• Bachelor's degree and 2+ years of prior relevant experience (related DISA customer experience and Cyber courses/certifications may be substituted in place of degree). 

• Active DoD 8570, IAT Level II Certification, and CSSP-Analyst1 certification at your start date.

• Demonstrated understanding of the life cycle of network threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques, open-source, and procedures (TTPs). 

• Demonstrated understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.

• Experience and proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics.

• Experience with malware analysis concepts and methods.

• Familiarity or experience in Intelligence Driven Defense.

• Willing to perform rotating shift work.

You Might Also Have:

• Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification (Security+ CE, CISSP or equivalent).

• Demonstrated commitment to training, self-study, and maintaining proficiency in the technical cyber security domain.

• CND experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization or Security Operations Center.

• In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. Nitro/McAfee Enterprise Security Manager, ArcSight, QRadar, LogLogic, Splunk).

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.