Cyber Analyst

Mid‑Level Defensive Cyber Software Developer – National Security Sector (NSS) – Cyber & Analytics Business Area (CABA) Location: Huntsville, Alabama. Job Type: Full‑time. Clearance: Must be able to obtain and maintain a TS/SCI clearance. Primary Responsibilities Perform Threat Intelligence Integration and Research reporting on detection gaps within our problem set while staying current on TTPs, vulnerabilities, and SOC technologies. Detection Engineering & Tuning analyzing false positives/negatives and providing feedback to developers so they can tweak detection algorithms for accuracy and operational relevance. Bridge the gap between defensive operations and software engineering by conducting training sessions and walkthroughs using simulated SOC scenarios. Participate in sprint planning and product roadmap discussions to ensure the operator perspective is baked into software requirements. Provide input on UI/UX for analyst efficiency and reduce cognitive load during high‑stress alerts. Basic Qualifications Bachelor’s Degree in cybersecurity or similar degree and 4–8 years of relevant experience (experience in lieu of a degree will be considered). Minimum 4+ years of professional experience in Cyber Security. Minimum 2+ years of professional experience as a SOC operator. Intermediate to Expert knowledge of Linux. Strong understanding of networking protocols at all layers of the networking stack and network architecture, accompanied with tools such as Wireshark. Intermediate to Expert knowledge of host‑based forensics, telemetry generation, and low‑level artifacts (memory, processes, and network packet analysis). Moderate ability to produce scripts for testing. Must be a U.S. Citizen and be able to obtain a TS/SCI security clearance. Preferred Qualifications Experience analyzing low‑level system artifacts, memory forensics, or firmware/embedded system security. Familiarity with the MITRE ATT&CK framework and mapping telemetry to specific adversary behaviors. Experience working in an Agile/Scrum development environment alongside software engineers. GIAC Certified Detection Engineer (GCDE). GIAC Certified Forensic Analyst (GCFA) / GIAC Network Forensic Analyst (GNFA). FOR572: Advanced Network Forensics. Pay and Benefits Pay Range: $87,100.00 – $157,450.00. Competitive compensation, health and wellness programs, income protection, paid leave and retirement benefits, and more. Commitment to Non‑Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider qualified applicants with criminal histories consistent with relevant laws. #J-18808-Ljbffr