Cyber Network Defense Team Lead - Aiea, HI | leidos Job

Leidos is seeking an experienced Cyber Network Defense Team Lead to support the Indo-Pacific Logistics and Sustainment Services (ILS2) program in Aiea, Hawaii. This position supports our customers' mission to protect Information Technology (IT) networked systems and services throughout the Indo-Pacific region from evolving cyber threats. As part of a 24x7 mission-critical cyber defense operation, the Cyber Network Defense Team Lead provides senior-level technical expertise and operational leadership to help detect, analyze, respond to, and mitigate cyber threats and maintain the security and resilience of mission-critical networks.

The Cyber Network Defense Team Lead serves as a senior technical lead responsible for coordinating 24x7 cyber network defense operations while remaining actively engaged in hands-on cyber defense activities. The Team Lead guides cyber network defense analysts in detecting, investigating, analyzing, and responding to cyber events; monitors security tools and network activity for malicious behavior; and develops response and mitigation recommendations. The successful candidate will be a self-starter capable of independently executing complex technical tasks while effectively leading and collaborating across a highly coordinated, mission-focused team. This position also serves as a key interface with customers, program leadership, and technical teams to communicate cyber events, operational status, trends, risks, and recommended courses of action.

Primary Responsibilities.

• Manage technical support projects or tasks in accordance with contract requirements, appropriate policies, procedures, and guidelines. 
• Manage the team and 24x7 schedule of technical cyber network defense analyst that investigate and analyze cyber events.
• Interface with customers, technical staff, team members, and management to identify issues, negotiate changes, meet deadlines, and provide strong customer service both orally and in writing, as appropriate.
• Generate daily, monthly, quarterly, yearly reports for customers involving project updates, metrics and ticketing trends.
• Generate weekly status reports for the Program Manager to include projected and accomplished objectives.
• Perform senior-level computer network incident detection and response activities to detect, correlate, identify and characterize anomalous activity that may be indicative of threats to the enterprise.
• Monitor various security tools and applications for possible malicious activities, perform senior-level investigations into any associated alerts or indicators, and develop recommendations for a course of action, including mitigation strategies if required.
• Possess good technical writing skills as each event, including the associated analysis, must be documented in a ticketing system so that it can be reviewed and acted on appropriately.
• Possess excellent communication skills as we are collocated with our customer and regular face-to-face interaction is required throughout the day.
• Follow Standard Operating Procedures (SOPs) and perform their duties with a high degree of attention to detail, ensuring that all system checks are performed in a timely manner and all documentation is complete and accurate.
• Influence project/team leaders regarding solution design, process and/or approaches.
• Review analyses, reports, and communications of juniors and peers to ensure accuracy and clarity of communications.
• Develop and conduct briefings to senior leaders.

Basic Qualifications

• Bachelor's Degree and 12+ yrs of experience; additional years of experience may be substituted in lieu of degree, including experience leading a team or effort.
• DoW 8570 IAT Level II (or Level III) Certification (e.g. Sec+ CE).
• DoW 8570 CSSP Analyst Certification (e.g. CEH), OR able to obtain one within 180 days of starting.
• DoW 8570 CSSP Infrastructure Support Certification (e.g. CEH, CySA+, SSCP), OR able to obtain one within 180 days of starting.
• Strong computing system knowledge, particularly networking, including a knowledge of communication protocols and familiarity with common computing security elements such as IDS/IPS systems and firewalls.
• Experience analyzing packet captures.
• Strong analytical, organizational, communication, and stakeholder management skills.
• Must be able to pass Yankee White clearance processing prior to start.
• Active TS/SCI security clearance required prior to start.
• Documenting analysis and providing response recommendations.

Preferred Qualifications

• Prior CND experience.
• Familiarity with computing security frameworks such as cyber kill chain and att&ck.
• Monitoring of intrusion detection and computer defense appliances and applications, and analysis of associated alerts.
• Prior experience in the Indo-Pacific region.

#ILS2

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting: