Cyber Network Defense Team Lead

Leidos is seeking an experienced Cyber Network Defense Team Lead to support the Indo-Pacific Logistics and Sustainment Services (ILS2) program in Aiea, Hawaii. This position supports our customers' mission to protect Information Technology (IT) networked systems and services throughout the Indo-Pacific region from evolving cyber threats. As part of a 24x7 mission-critical cyber defense operation, the Cyber Network Defense Team Lead provides senior-level technical expertise and operational leadership to help detect, analyze, respond to, and mitigate cyber threats and maintain the security and resilience of mission-critical networks.

The Cyber Network Defense Team Lead serves as a senior technical lead responsible for coordinating 24x7 cyber network defense operations while remaining actively engaged in hands-on cyber defense activities. The Team Lead guides cyber network defense analysts in detecting, investigating, analyzing, and responding to cyber events; monitors security tools and network activity for malicious behavior; and develops response and mitigation recommendations. The successful candidate will be a self-starter capable of independently executing complex technical tasks while effectively leading and collaborating across a highly coordinated, mission-focused team. This position also serves as a key interface with customers, program leadership, and technical teams to communicate cyber events, operational status, trends, risks, and recommended courses of action.

Primary Responsibilities.

• Manage technical support projects or tasks in accordance with contract requirements, appropriate policies, procedures, and guidelines. 
• Manage the team and 24x7 schedule of technical cyber network defense analyst that investigate and analyze cyber events.
• Interface with customers, technical staff, team members, and management to identify issues, negotiate changes, meet deadlines, and provide strong customer service both orally and in writing, as appropriate.
• Generate daily, monthly, quarterly, yearly reports for customers involving project updates, metrics and ticketing trends.
• Generate weekly status reports for the Program Manager to include projected and accomplished objectives.
• Perform senior-level computer network incident detection and response activities to detect, correlate, identify and characterize anomalous activity that may be indicative of threats to the enterprise.
• Monitor various security tools and applications for possible malicious activities, perform senior-level investigations into any associated alerts or indicators, and develop recommendations for a course of action, including mitigation strategies if required.
• Possess good technical writing skills as each event, including the associated analysis, must be documented in a ticketing system so that it can be reviewed and acted on appropriately.
• Possess excellent communication skills as we are collocated with our customer and regular face-to-face interaction is required throughout the day.
• Follow Standard Operating Procedures (SOPs) and perform their duties with a high degree of attention to detail, ensuring that all system checks are performed in a timely manner and all documentation is complete and accurate.
• Influence project/team leaders regarding solution design, process and/or approaches.
• Review analyses, reports, and communications of juniors and peers to ensure accuracy and clarity of communications.
• Develop and conduct briefings to senior leaders.

Basic Qualifications

• Bachelor's Degree and 12+ yrs of experience; additional years of experience may be substituted in lieu of degree, including experience leading a team or effort.
• DoW 8570 IAT Level II (or Level III) Certification (e.g. Sec+ CE).
• DoW 8570 CSSP Analyst Certification (e.g. CEH), OR able to obtain one within 180 days of starting.
• DoW 8570 CSSP Infrastructure Support Certification (e.g. CEH, CySA+, SSCP), OR able to obtain one within 180 days of starting.
• Strong computing system knowledge, particularly networking, including a knowledge of communication protocols and familiarity with common computing security elements such as IDS/IPS systems and firewalls.
• Experience analyzing packet captures.
• Strong analytical, organizational, communication, and stakeholder management skills.
• Must be able to pass Yankee White clearance processing prior to start.
• Active TS/SCI security clearance required prior to start.
• Documenting analysis and providing response recommendations.

Preferred Qualifications

• Prior CND experience.
• Familiarity with computing security frameworks such as cyber kill chain and att&ck.
• Monitoring of intrusion detection and computer defense appliances and applications, and analysis of associated alerts.
• Prior experience in the Indo-Pacific region.

#ILS2

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.