Job description

Looking for an opportunity to make an impact? At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. The Leidos Intelligence Sector combines technology-enabled services and mission software capabilities in the areas of cyber, logistics, security operations, and decision analytics to support our defense and intel customers’ mission to defend against evolving threats around the world. Your greatest work is ahead! The Intelligence Sector seeks a highly qualified and trained Journeyman-level Cyberspace Intelligence Threat Analysts to support United States Cyber Command (USCYBERCOM) operations, with focus on identifying, analyzing, and recommending mitigation strategies for Cyber threats targeting Offensive Cyberspace Operations (OCO) systems. This vital on-site support to USCYBERCOM J3 (Operations), Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES) underpins USCYBERCOM support to United States National Security objectives. What you’ll be doing: Provide timely, accurate, relevant support in manner that best supports USCYBERCOM in identifying and assessing emerging threats and vulnerabilities in the Cyberspace domain, with focus on risks to OCO systems. Analyze and evaluate All-Source finished intelligence, single-source intelligence, and technical data from various sources to identify Cyber threat patterns and anomalies. Produce and deliver recurring threat intelligence reports, summarizing relevant cyber threats to OCO infrastructure. Conduct and publish in-depth risk assessments to evaluate and categorize the risk posture of detected cyber threats while supporting development and refinement of risk assessment methodologies and tools used for threat categorization. Utilize Signals Intelligence (SIGINT) tools and apply analytical methodologies when required to perform technical analysis on critical Cyber threats impacting OCO assets. Collaborate with operational, technical, and intelligence elements across USCYBERCOM to enhance situational awareness and threat response capabilities. Maintain a current understanding of advanced persistent threats (APTs), threat actor tactics, techniques, and procedures (TTPs), and cyber threat trends affecting national security. Maintain situational awareness of, and execute on demand, Cyberspace Operations (CO) crisis plans. Provide situational awareness to a range of projects, Crisis Action Teams, and current operations activities supporting Operational Planning Teams (OPTs). Execute resource allocation decisions aligned with organization objectives. Apply knowledge of cyber threats and attack methods and techniques emanating from state and non-state adversaries and tiered vulnerabilities within Blue Space as focus of threats. Develop and execute comprehensive programs for assessing CO and validating operational performance characteristics. Review, approve, prioritize, and submit operational requirements for research, development, and/or acquisition of cyber capabilities. Support integration and synchronization of intelligence planning activities with operational planning timelines. Interpret and apply laws, regulations, policies, and guidance relevant to daily activities. Communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means. What does Leidos need from me? Active Top Secret clearance with SCI eligibility and Polygraph required. BA/BS degree or higher within Cybersecurity, Computer Science, Intelligence Studies, or related field, or ability to complete degree within one year of hire. Can substitute formal education with extended experience and technical certifications. Five plus years’ experience within Cyber intelligence analysis or a similar Cyber threat analyst role, or eight plus years’ total within field of intelligence analysis. Demonstrated understanding of All-Source intelligence principles as applied to field of Cyber. Demonstrated experience with applicable SIGINT tools and techniques and able to produce single-source intelligence products tailored to drive CO. Broad knowledge of Blue-space Cyber capabilities and demonstrate understanding of available Cyber infrastructure or platforms to conduct Defensive (DCO) and Offensive Cyberspace Operations (OCO). Knowledge of the range of CO and their underlying intelligence support needs, topics, and focus areas. Knowledge of computer networking fundamentals as well as concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless). Ability to support timely, accurate, relevant analytical production, to include documents, summaries, issue papers, talking points, and briefings Demonstrated proficiency working in a fast-paced collaborative environment, ability to proactively multi-task and meet short deadlines. Strong interpersonal, critical thinking, and communication skills, including the ability to clearly convey complex and technical data to non-technical consumers. Favorable if you have: Masters’ Degree or higher within Cybersecurity, Intelligence Studies, Information Security or related fields. Intimate familiarity with USCYBERCOM organizational structure and mission. Prior experience supporting Joint operations across multiple warfighting domains. Demonstrated experience incorporating Artificial Intelligence and Machine Learning into operations at any level to increase efficiency and effectiveness of operational outcomes Experience with Space-enabled CO. Formal training within field of Cyber Warfare and Joint Operations. Familiar with art of Data Science and applicability to CO. Familiar with Microsoft Power BI data visualization software. Familiarity with Cyber threat frameworks such as MITRE ATT&CK or Cyber Kill Chain. Desired Certifications: DoD 8570 IAT Level II (CCNA Security, COMPTIA CySA , COMPTIA Security CE, GICSP, GSEC, SSCP). This posting is for multiple opportunities ranging in years of experience. Level of opportunity including compensation, will be matched to the candidate s experience. If you re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We re not hiring followers. We re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We re already at step 30 — and moving faster than anyone else dares. Original Posting: October 17, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $57,850.00 - $104,575.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Requirements

Must-haves

Looking for an opportunity to make an impact?
Your greatest work is ahead!
Provide timely, accurate, relevant support in manner that best supports USCYBERCOM in identifying and assessing emerging threats and vulnerabilities in the Cyberspace domain, with focus on risks to OCO systems.
Analyze and evaluate All-Source finished intelligence, single-source intelligence, and technical data from various sources to identify Cyber threat patterns and anomalies.
Produce and deliver recurring threat intelligence reports, summarizing relevant cyber threats to OCO infrastructure.
Utilize Signals Intelligence (SIGINT) tools and apply analytical methodologies when required to perform technical analysis on critical Cyber threats impacting OCO assets.
Collaborate with operational, technical, and intelligence elements across USCYBERCOM to enhance situational awareness and threat response capabilities.
Maintain a current understanding of advanced persistent threats (APTs), threat actor tactics, techniques, and procedures (TTPs), and cyber threat trends affecting national security.
Maintain situational awareness of, and execute on demand, Cyberspace Operations (CO) crisis plans.
Provide situational awareness to a range of projects, Crisis Action Teams, and current operations activities supporting Operational Planning Teams (OPTs).
Execute resource allocation decisions aligned with organization objectives.
Apply knowledge of cyber threats and attack methods and techniques emanating from state and non-state adversaries and tiered vulnerabilities within Blue Space as focus of threats.
Develop and execute comprehensive programs for assessing CO and validating operational performance characteristics.
Review, approve, prioritize, and submit operational requirements for research, development, and/or acquisition of cyber capabilities.
Support integration and synchronization of intelligence planning activities with operational planning timelines.
Interpret and apply laws, regulations, policies, and guidance relevant to daily activities.
Communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.
What does Leidos need from me?
Active Top Secret clearance with SCI eligibility and Polygraph required.
Five plus years’ experience within Cyber intelligence analysis or a similar Cyber threat analyst role, or eight plus years’ total within field of intelligence analysis.
Demonstrated understanding of All-Source intelligence principles as applied to field of Cyber.
Demonstrated experience with applicable SIGINT tools and techniques and able to produce single-source intelligence products tailored to drive CO.
Broad knowledge of Blue-space Cyber capabilities and demonstrate understanding of available Cyber infrastructure or platforms to conduct Defensive (DCO) and Offensive Cyberspace Operations (OCO).
Knowledge of the range of CO and their underlying intelligence support needs, topics, and focus areas.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

machine learning

Platform: workday
Effort: long