Cyber Defense Analyst

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Must not repeat job title. Must not include Job ID etc. Must preserve all substantive info, no invented or summarizing away detail. Remove boilerplate, navigation, legal, EEO, scam warning, duplicated lines, application instructions. We need to parse the posting. Key info: - Location: Suitland, MD - Clearance: Active TS/SCI - 1st Shift Work Hours: 0730 – 1530 - Work Schedule: This is a 1st shift position with regular work hours of 0730 – 1530. Occasional floater shifts or coverage outside of these hours may be required based on program and staffing needs. - Primary Responsibilities list (multiple bullet points): - Perform first line monitoring of security tools and conduct initial analysis of alerts for TS/SCI networks, including JWICS, ATLAS, and other networks for which HGCC is responsible. - Monitor organizational cybersecurity tools for alerts, anomalies, and indicators of compromise. - Investigate and perform initial technical analysis of cybersecurity alerts and events, escalating potential incidents to Tier 2 as appropriate. - Create, update, and manage incident and event tickets within the approved ticketing system. - Conduct proactive threat hunting activities to identify potential malicious activity and emerging threats. - Perform wireless security scans of facilities and document and report findings. - Correlate alerts and security events across multiple platforms to identify patterns, trends, and potential threats. - Prepare and deliver operational and situational awareness briefings. - Support annual cyber defense exercises. - Required Qualifications: - Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, or a related area of study desired with 4+ years of experience or Master’s degree with 2+ years of experience. Additional experience may be considered in lieu of a degree. - Active TS/SCI security clearance. - Concentrated experience in the CND discipline, regardless of degree. - Experience monitoring and investigating alerts from cybersecurity tools. - Experience with Security Information and Event Management (SIEM) systems such as Splunk and Elastic. - Experience with Network Intrusion Detection/Prevention Systems (NIDPS), such as Cisco FirePower and Palo Alto NGFW, as well as host-based tools such as Trellix ePO, Microsoft Defender, and Tanium. - Knowledge of scripting and coding languages such as Python, Perl, Ruby, JavaScript, PowerShell, C, C++, and Java. - Knowledge of penetration testing and red team tactics, techniques, and procedures, as well as tools such as Kali, SamuraiWTF, Nmap, Burp Suite, sqlmap, and Metasploit. - Knowledge of ticketing systems, report writing, and intelligence gathering, analysis, and dissemination techniques specific to cybersecurity. - Strong analytical, conceptual, and problem-solving skills. - Required Certifications: - Must possess one of the following certifications or obtain one within 30 days of accepting an offer: CompTIA CySA+, CompTIA PenTest+, CompTIA Cloud+, EC Council CEH, GIAC GCIA, GIAC GCIH, GICSP, or Cisco CyberOps. - Pay Range: $87,100.00 - $157,450.00 (with note about guideline). So we have Pay section. - Benefits: "Pay and benefits are fundamental... Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits." So we have Benefits section. - About Leidos: description of company. Could be "About the role"? Actually "About Leidos" is company overview. The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to map content accordingly. We have "About the role" maybe a short paragraph describing role: The description includes "Leidos is seeking a Cyber Defense Analyst (1st Shift) to join a mission focused team supporting the Navy's cybersecurity environment at the Office of Naval Intelligence (ONI) Hopper Global Communications Center (HGCC) in Suitland, MD. In this role, you will serve on the front line of cyber defense, helping protect critical TS/SCI networks by monitoring and investigating cybersecurity alerts, identifying potential threats, and supporting proactive threat hunting activities. You will apply your experience in the Certified Network Defender (CND) discipline and knowledge of IT systems and networks to analyze security events, manage incident tickets, support intelligence gathering and analysis, and communicate findings to key stakeholders." That's suitable for About the role. Responsibilities: list of primary responsibilities. Requirements: maybe includes clearance, degree/experience, certifications? But we have separate sections: Requirements, Qualifications, Skills. The instruction says use those headings if content exists. We need to decide what goes where. We have Required Qualifications (degree/experience, clearance, CND experience, etc.) Could be Qualifications. We have Required Certifications (list) could be Requirements? Or maybe Requirements includes certifications. But we also have Skills: knowledge of scripting languages, penetration testing, ticketing systems, etc. So we can split. Thus: - About the role: paragraph as above. - Responsibilities: ul list of responsibilities. - Requirements: maybe include Active TS/SCI security clearance, Required Certifications (must possess one of...), maybe also "Additional experience may be considered in lieu of a degree." But that's more qualification. However we can put clearance and certifications under Requirements. - Qualifications: degree/experience, CND experience, experience monitoring alerts, experience with SIEM, NIDPS, host-based tools. - Skills: knowledge of scripting languages, knowledge of penetration testing and red team tactics/tools, knowledge of ticketing systems, report writing, intelligence gathering, strong analytical skills. - Benefits: paragraph about benefits. - Pay: Pay range. - Schedule: work hours and occasional floater shifts. We must not include boilerplate like "About Leidos", "Pay And Benefits" heading duplication, "Securing Your Data", "Commitment to Non-Discrimination", etc. We must not include duplicated lines. We must not include placeholders like "commensurate with experience". Not present. We must preserve all substantive info. Ensure we don't lose any details. Let's extract exact sentences. About the role paragraph: Could combine two sentences: "Leidos is seeking a Cyber Defense Analyst (1st Shift) to join a mission focused team supporting the Navy's cybersecurity environment at the Office of Naval Intelligence (ONI) Hopper Global Communications Center (HGCC) in Suitland, MD. In this role, you will serve on the front line of cyber defense, helping protect critical TS/SCI networks by monitoring and investigating cybersecurity alerts, identifying potential threats, and supporting proactive threat hunting activities. You will apply your experience in the Certified Network Defender (CND) discipline and knowledge of IT systems and networks to analyze security events, manage incident tickets, support intelligence gathering and analysis, and communicate findings to key stakeholders." That's fine. Responsibilities list: each bullet as given. Requirements: Active TS/SCI security clearance; Must possess one of the following certifications or obtain one within 30 days of accepting an offer: CompTIA CySA+, CompTIA PenTest+, CompTIA Cloud+, EC Council CEH, GIAC GCIA, GIAC GCIH, GICSP, or Cisco CyberOps. Also maybe "Additional experience may be considered in lieu of a degree." but that is more qualification. We'll keep it under Qualifications maybe. Qualifications: Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, or a related area of study desired with 4+ years of experience or Master’s degree with 2+ years of experience. Additional experience may be considered in lieu of a degree. Concentrated experience in the CND discipline, regardless of degree. Experience monitoring and investigating alerts from cybersecurity tools. Experience with Security Information and Event Management (SIEM) systems such as Splunk and Elastic. Experience with Network Intrusion Detection/Prevention Systems (NIDPS), such as Cisco FirePower and Palo Alto NGFW, as well as host-based tools such as Trellix ePO, Microsoft Defender, and Tanium. Skills: Knowledge of scripting and coding languages such as Python, Perl, Ruby, JavaScript, PowerShell, C, C++, and Java. Knowledge of penetration testing and red team tactics, techniques, and procedures, as well as tools such as Kali, SamuraiWTF, Nmap, Burp Suite, sqlmap, and Metasploit. Knowledge of ticketing systems, report writing, and intelligence gathering, analysis, and dissemination techniques specific to cybersecurity. Strong analytical, conceptual, and problem-solving skills. Benefits: Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits. Pay: Pay Range $87,100.00 - $157,450.00 (with note that it's a guideline). We should include the note? The instruction says preserve ALL substantive information; do NOT invent or summarize away detail. So we should include the note: "The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law." That's substantive. So include that as a paragraph after the range. Schedule: Work Schedule: This is a 1st shift position with regular work hours of 0730 – 1530. Occasional floater shifts or coverage outside of these hours may be required based on program and staffing needs. We also have location and clearance maybe could be included in About the role or Requirements. Clearance is a requirement; we placed under Requirements. Location maybe not needed as heading; could be included in About the role paragraph (we already have Suitland, MD). Good. Now produce HTML fragment with headings

for each section, and

• for lists,

  for prose. We must not include any extra markup like or . Just the fragment. Let's craft. Check for duplicate content: Ensure we didn't repeat any sentences. We'll produce:

  About the role

  Leidos is seeking a Cyber Defense Analyst (1st Shift) to join a mission focused team supporting the Navy's cybersecurity environment at the Office of Naval Intelligence (ONI) Hopper Global Communications Center (HGCC) in Suitland, MD. In this role, you will serve on the front line of cyber defense, helping protect critical TS/SCI networks by monitoring and investigating cybersecurity alerts, identifying potential threats, and supporting proactive threat hunting activities. You will apply your experience in the Certified Network Defender (CND) discipline and knowledge of IT systems and networks to analyze security events, manage incident tickets, support intelligence gathering and analysis, and communicate findings to key stakeholders.

  Responsibilities

  • Perform first line monitoring of security tools and conduct initial analysis of alerts for TS/SCI networks, including JWICS, ATLAS, and other networks for which HGCC is responsible.
  • Monitor organizational cybersecurity tools for alerts, anomalies, and indicators of compromise.
  • Investigate and perform initial technical analysis of cybersecurity alerts and events, escalating potential incidents to Tier 2 as appropriate.
  • Create, update, and manage incident and event tickets within the approved ticketing system.
  • Conduct proactive threat hunting activities to identify potential malicious activity and emerging threats.