Cyber Analytics Team Lead

Leidos is seeking an experienced cybersecurity professional to serve as the Cyber Analysis Lead supporting the Defense Manpower Data Center (DMDC) and the Defense Human Resources Activity (DHRA) within the Office of the Under Secretary of Defense for Personnel & Readiness (OUSD P&R).

This Key Personnel position provides technical leadership for cyber analysis activities supporting one of the Department of Defense's most critical information environments. DMDC maintains the Department's largest centralized repository of personnel, manpower, identity, readiness, pay, casualty, personnel security, entitlement, and financial information. The Cyber Analysis Lead will direct the team responsible for identifying cyber threats, analyzing vulnerabilities, assessing enterprise risk, and developing actionable mitigation recommendations that strengthen the organization's overall cybersecurity posture.

The selected candidate will lead cyber analysis activities supporting a complex enterprise environment that includes approximately 15,000 network and endpoint devices, over 600 Government applications, approximately 100 Risk Management Framework (RMF) authorization boundaries, hybrid cloud environments, globally distributed infrastructure, and multiple cybersecurity service providers supporting worldwide operations.

This role requires a technical leader capable of translating cyber threat intelligence, vulnerability analysis, and operational data into meaningful risk reduction strategies that improve enterprise security while supporting mission operations.

Mission Environment

The Cyber Analysis Lead provides technical leadership supporting cybersecurity operations across a diverse enterprise consisting of:

• Approximately 15,000 network and endpoint devices.

• More than 600 Government-owned applications supporting DoD missions.

• Approximately 100 Risk Management Framework (RMF) authorization boundaries.

• Hybrid cloud environments including Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), Software-as-a-Service (SaaS), and DISA-hosted capabilities.

• Worldwide enterprise infrastructure supporting personnel, identity, readiness, and mission support operations.

• Multiple Cybersecurity Service Providers (CSSPs).

• Government and contractor-operated environments requiring close coordination between cybersecurity, IT operations, and mission stakeholders.

Primary Responsibilities

• Lead and direct a team of cyber analysts responsible for identifying, analyzing, and mitigating cyber threats and vulnerabilities.

• Develop and implement enterprise security monitoring strategies and analytical methodologies that strengthen the organization's cybersecurity posture.

• Lead threat intelligence analysis, vulnerability assessments, and cyber risk evaluations across enterprise environments.

• Develop actionable, risk-based mitigation recommendations that enable informed decision-making and improve defensive capabilities.

• Coordinate with Government stakeholders, SOC personnel, and technical teams to support proactive cyber defense operations.

• Mentor and develop cyber analysts, fostering technical growth and analytical excellence.

• Analyze threat intelligence, security events, and vulnerability data to identify trends, emerging threats, and opportunities for risk reduction.

• Support continuous improvement of analytical processes, reporting methodologies, and cyber assessment capabilities.

• Ensure analytical activities align with DoD cybersecurity policies, Risk Management Framework (RMF) guidance, and industry best practices.

• Prepare and present analytical findings, cybersecurity assessments, and recommendations to Government leadership and program stakeholders.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline with 10 years of progressively responsible experience in cybersecurity operations, cyber analysis, threat intelligence, vulnerability management, or cyber defense. Additional relevant experience may be considered in lieu of a degree in accordance with Leidos equivalency guidelines.

• Demonstrated experience leading cyber analysis, threat intelligence, vulnerability assessment, or cyber defense teams.

• Experience identifying, assessing, and prioritizing cybersecurity risks within large enterprise environments.

• Experience developing risk-based mitigation recommendations for technical and executive stakeholders.

• Strong understanding of enterprise security monitoring, threat intelligence, vulnerability management, SIEM technologies, and cyber defense operations.

• Demonstrated ability to communicate complex technical findings to Government leadership and executive stakeholders.

• Active Secret Security Clearance with the ability to maintain the required clearance.

• Ability to satisfy applicable DoD 8140 certification requirements for the assigned work role.

• Experience aligned with DoD Cyber Workforce Framework (DCWF) Work Role 443 – Network Analyst (Advanced).

• Ability to support onsite operations at the Government's Mark Center (Alexandria, VA) or DoD Center–Monterey Bay (Seaside, CA) in accordance with contract requirements.

Preferred Qualifications

• Previous experience supporting the Defense Manpower Data Center (DMDC), Defense Human Resources Activity (DHRA), or other Department of Defense organizations.

• Experience conducting enterprise threat intelligence analysis and cyber risk assessments in Federal or DoD environments.

• Experience operating within hybrid enterprise environments spanning on-premises infrastructure, Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), and Software-as-a-Service (SaaS) platforms.

• Familiarity with MITRE ATT&CK, Cyber Kill Chain, threat hunting methodologies, and advanced threat analysis techniques.

• Experience with vulnerability management platforms, security analytics, and cyber reporting tools.

• Working knowledge of the Risk Management Framework (RMF), eMASS, continuous monitoring, and enterprise cybersecurity compliance.

• Professional cybersecurity certifications such as CISSP, GSEC, CySA+, CASP+, GCIH, GCIA, or equivalent.

• Excellent written and verbal communication skills with demonstrated experience briefing technical teams, program leadership, executive management, and Government customers.

• Demonstrated success leading technical teams, improving analytical processes, and driving enterprise cybersecurity initiatives.

Key Personnel

This position is designated as Key Personnel under the contract. The selected candidate will serve as the technical lead for enterprise cyber analysis activities and is expected to be available at contract start. Because of the critical nature of this role, any future personnel substitutions are subject to Government approval in accordance with contractual requirements.

Work Location: This position supports a hybrid work environment; however, Key Personnel are expected to report to a Government site. The selected candidate will be based at either the Mark Center in Alexandria, VA, or the DoD Center–Monterey Bay (DODC-MB) in Seaside, CA, in accordance with contract requirements.

Required Clearance:

Applicants must possess an active DoD Secret clearance at time of consideration with the eligibility to maintain the required clearance. .

DMDC Cyber Primes

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.