Jobs in the United States

25+ jobs

Save this search

Added 2 mins ago
AI Observability Engineer
Moring Ai
Alpharetta, GA
…inside that organization use it to build and deploy agents: Python applications that call LLMs, use tools, and run on Kubernetes. When one of those agents is slow, expensive, wrong, or…
Added 2 mins ago
Senior AI Platform Engineer (Tech Lead)
Moring Ai
Alpharetta, GA
…inside that organization build and deploy agentic AI workflows: Python applications that call LLMs, use tools, and run as agents on Kubernetes. The platform includes an LLM gateway, an…
Added 2 mins ago
Senior AI Platform Architect
Moring Ai
Alpharetta, GA
…inside that organization build and deploy agentic AI workflows: Python applications that call LLMs, use tools, and run as agents on Kubernetes. The platform includes an LLM gateway, an…
Added 6 mins ago
Sr Engineer, Data Prsnliztn
Tractor Supply Company
Brentwood, TN
…analytics and engineering techniques. Specializing in SQL, Python, Adobe suite, Alteryx, and Azure, this role is at the heart of our data engineering efforts to model insights and support…
Added 6 mins ago
Sr Financial Analyst – Strategic Modeling & Analytics
Milwaukee Tool
Cookeville, TN
Experience with data visualization and analytics tools such as Power BI, Tableau, SQL, Databricks, Python, or similar platforms preferred.
Added 6 mins ago
Capital One Shopping Tech, Full - stack Engineer 5 (Remote - Eligible)
Capital One
Nashville, TN
Utilize programming languages like JavaScript, Java, HTML/CSS, TypeScript, SQL, Python, and Go, Open Source RDBMS and NoSQL databases, Container Orchestration services including Docker and…
Added 6 mins ago
DevSecOps Integration Engineer
Syms Strategic Group, LLC (SSG)
Nashville, TN
Proficiency in scripting languages such as Python, Bash, PowerShell, or NodeJS for automation
Added 6 mins ago
Security & Compliance Engineer I, AWS Security Assurance Services, LLC
Amazon
Nashville, TN
Write Python and policy-as-code (cfn-guard, OPA Rego, Cedar) to extend preventive and detective controls.
Added 6 mins ago
Business Intel Engineer III, re:Cycle Reverse Logistics
Amazon
Nashville, TN
Experience in scripting for automation (e.g. Python) and advanced SQL skills.
Added 7 mins ago
Staff Consultant - Cloud Automation
Nutanix
Nashville, TN
Strong, hands-on scripting skills utilizing PowerShell, Bash, or Python.
Added 7 mins ago
C
Frontier Engineer (AI/Agentic)
Cognizant
Nashville, TN
- $100,000 USD / year
…projects using one or more programming languages such as Java, Python, JavaScript, TypeScript, or…
Added 7 mins ago
Security Engineer - Applied AI
Meta
Nashville, TN
Proficiency in coding with experience in languages such as Python or Rust
Added 7 mins ago
L55 - Lead DevOps Engineer II
Deloitte
Nashville, TN · Hermitage, TN
Added 7 mins ago
EG
Data Scientist
Eliassen Group
Nashville, TN
- $74.46 to $84.46 USD / hour
Develop and optimize SQL and Python solutions for data extraction, transformation, analysis, and automation.
Added 9 mins ago
Data Analyst
KING AEROSPACE
Addison, TX
Added 13 mins ago
System Software / Embedded Engineer
Jobgether
Remote, United States
Programming expertise: Advanced proficiency in C and C++, along with working proficiency in Python, Bash/Shell, or related scripting languages. Rust experience is an advantage.
Added 13 mins ago
Senior Manager, Data Engineering
Jobgether
Remote, United States
Backend engineering: Working proficiency in at least one backend programming language, such as Python, with the ability to review code, contribute technically, and guide implementation…
Added 13 mins ago
J
AI Product Lead (Principal Product Manager)
Jobgether
Remote, United States
- $174,800 to $205,700 USD / year
Proficiency in SQL for independent data analysis and comfort using Python for lightweight prototyping.
Added 24 mins ago
Lead Network Automation Engineer
GD Information Technology, Inc.
United States
The ideal candidate combines strong network engineering fundamentals with advanced hands on expertise in Python and Ansible. This individual will collaborate closely with network…
Added 24 mins ago
Automation Developer
GD Information Technology, Inc.
United States
Ansible (Software), Bash Scripts, GitLab, IBM Tivoli Netcool/OMNIbus, Python AutomationCertifications:
Added 30 mins ago
FL
Databricks Platform Engineer – Azure / DevSecOps
FSR, LLC.
Washington, DC
- $120,000 to $140,000 USD / year
Python or Bash scripting and Git-based version control.
Added 31 mins ago
Staff Machine Learning Engineer, Compliance Automation (Platform)
Coinbase
Remote, United States
Strong Python proficiency with hands-on experience in GenAI frameworks and ML infrastructure (e.g., LangChain, vector databases, Airflow, Spark, or equivalent orchestration and data…
Added 45 mins ago
J
Staff Software Engineer, Data
Jobgether
Remote, United States
- $175,500 to $230,000 USD / year
Expert-level SQL and Python skills, supported by strong engineering practices including automated testing, code reviews, and continuous integration.
Added 45 mins ago
J
Senior DevOps Engineer /Infrastructure Automation Developer / Ansible Engineer
Jobgether
Remote, United States
- $65 to $75 USD / hour
…looking for a Senior DevOps Engineer / Infrastructure Automation Developer / Ansible Engineer based in the United…
Added 49 mins ago
Lead Network Automation Engineer
GD Information Technology, Inc.
United States
The ideal candidate combines strong network engineering fundamentals with advanced hands on expertise in Python and Ansible. This individual will collaborate closely with network…

LEIDOS, INC.

SOC Analyst

Alexandria, VA, United States

Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary.

Apply About employer

Applications open in a new tab.

Job details

Pay: Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary.
Posting language: English
Posted: Oct 28, 2026

Original job description

Leidos has a current opportunity for a Security Operations Center (SOC) Analyst supporting the Pentagon Reservation under the DISA GSM-O II TN24 Penetration Handling, Incident, System Health (PHISH) Support Services II program. This position supports a 24/7 SOC mission and requires availability for rotating shifts, including weekends, holidays, and inclement-weather operations.

The Security Operations Center (SOC) Analyst supports continuous monitoring, detection, analysis, escalation, mitigation, and response to cybersecurity events affecting customer networks, endpoints, servers, applications, cloud environments, and mission systems. The analyst uses security telemetry, threat intelligence, established analytic procedures, and operational tools to identify suspicious or malicious activity; investigate potential compromises; document findings; and coordinate response actions with senior analysts, incident responders, cyber engineers, system owners, and mission partners. This role is an experienced technical individual-contributor position. The SOC Analyst works independently to achieve day-to-day operational objectives and may own defined projects or technical processes within the SOC. The analyst contributes to operational cybersecurity, infrastructure support, and mission-support activities; collaborates with internal subject-matter experts to resolve technical problems; and may provide peer support, coaching, or technical review for less-experienced personnel.

Primary Responsibilities

Monitor, triage, and investigate alerts from Security Information and Event Management (SIEM) platforms, Endpoint Detection and Response (EDR) tools, intrusion detection and prevention systems (IDS/IPS), authentication logs, NetFlow, packet capture, cloud-security tools, vulnerability data, and other available security sensors.
Analyze endpoint, host, network, identity, application, and cloud telemetry to identify anomalous, suspicious, or malicious activity.
Conduct assigned incident investigations by reviewing security logs and alerts, correlating evidence across available data sources, identifying potentially affected systems or accounts, assessing scope and potential impact, and escalating cases in accordance with established procedures.
Apply cyber threat intelligence and knowledge of adversary tactics, techniques, and procedures (TTPs) to validate alerts, identify indicators of compromise, prioritize investigations, and provide relevant context to incident responders and technical stakeholders.
Support approved containment, eradication, recovery, and post-incident activities by collecting evidence, documenting actions, validating security controls, and coordinating with designated response personnel.
Perform computer forensic network and host analysis in support of incident investigations, threat-hunting activities, and evidence-based reporting.
Support proactive threat hunts, environment sweeps, and detection-validation activities based on known or emerging adversary activity, vulnerabilities, and organizational priorities.
Identify recurring false positives, control gaps, telemetry limitations, suspicious trends, vulnerabilities, and adversary behaviors; recommend improvements to detection logic, dashboards, analytic workflows, playbooks, and SOC processes.
Contribute to the development, testing, tuning, and documentation of detection use cases, correlation logic, analytic playbooks, standard operating procedures, work instructions, and knowledge-management artifacts.
Document analytic methods, evidence, findings, actions taken, escalation decisions, and recommended next steps in case-management and knowledge-management systems.
Prepare clear incident tickets, shift summaries, situational-awareness updates, and technical reports for SOC personnel, incident responders, system owners, and operational stakeholders.
Conduct authorized infrastructure-support activities, including device discovery, operating-system fingerprinting, service scanning, passive network scanning, and support to the configuration, testing, deployment, and maintenance of cybersecurity hardware and software.
Maintain proficiency with operational tools, cyber-defense methodologies, network and host analysis techniques, and evolving threats.
Support training, exercises, operational planning, and integrated cyber operations as assigned.
Collaborate with SOC operations, incident response, cyber engineering, threat intelligence, system administrators, and mission partners to share findings and support timely remediation.
Provide technical guidance, peer review, and knowledge sharing to junior analysts or other team members, as assigned.

Required Qualifications

Must have an active DoD Top Secret clearance with ability to obtain SCI
Must have DoD 8570 IAT II or higher certification (such as CompTIA Security+ CE, ISC2 SSCP, SANS GSEC, etc.) prior to starting.
Must be able to obtain DoD 8570 CSSP-Analyst certification (such as CEH, CySA+, GCIA, etc.) within 6 months of starting.
Bachelor’s degree in cybersecurity, information technology, computer science, intelligence studies, or a related technical discipline, and 4-8 years of relevant experience; or an equivalent combination of relevant military service, cybersecurity education, certifications, and professional experience.
Experience supporting a SOC, CND organization, cyber protection team, incident-response team, network operations center, or comparable cybersecurity operations environment.
Experience monitoring and investigating cybersecurity events using SIEM, EDR, IDS/IPS, endpoint, network, identity, cloud, vulnerability, and log-data sources.
Working knowledge of incident-response processes, including alert triage, investigation, escalation, evidence collection, containment support, remediation coordination, and incident documentation.
Working knowledge of TCP/IP; common ports and protocols; network traffic flow; endpoint and operating-system fundamentals; authentication and identity activity; and enterprise security controls.
Familiarity with adversary TTPs, attack vectors, indicators of compromise, common malware behaviors, and analytic frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
Ability to analyze available data, identify gaps or uncertainties, apply established procedures, and communicate technically sound findings and recommendations.
Ability to prepare clear case notes, incident summaries, shift-turnover products, and technical reports for technical and operational audiences.
Ability to collaborate effectively across SOC operations, incident response, cyber engineering, system administration, and customer or mission-partner organizations.
Ability to work independently on assigned operational objectives, technical processes, or projects, while recognizing when to seek assistance or escalate risk.

Preferred Qualifications

Experience using one or more enterprise SIEM platforms, such as Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, Elastic, or comparable tools.
Experience with EDR, antivirus, host-based security tools, IDS/IPS, network detection and response, vulnerability-management tools, NetFlow, or packet-capture analysis.
Familiarity with Windows and Unix/Linux operating systems, command-line tools, and system-administration concepts.
Experience with structured threat hunting, detection tuning, use-case development, or translating threat intelligence into analytic queries.
Familiarity with malicious-file triage, malware-analysis concepts, network-forensics techniques, or host-forensics artifacts.
Experience with scripting or automation using Python, PowerShell, Bash, or a similar language.
Relevant cybersecurity certification(s), including those required by the applicable contract, customer, or Department of War policy.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

October 28, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Apply About employer

More about this job

Skills

Event planning
IDS
IPS
Reporting
Documentation
Case management
Cybersecurity
Incident response
Security+
Computer technology
Computer science
MITRE ATT&CK
System administration
Work independently
Splunk
Microsoft Windows
UNIX
Linux
Python
Microsoft PowerShell
Bash

Report this job