SME Disaster Recovery Analyst

The Department of War enterprise data and analytics program delivers mission‑critical capabilities that enable leaders across the Department to make faster, better‑informed decisions using trusted data dos Digital Modernization sector is seeking an experienced SME Disaster Recovery Analyst to support the delivery, enhancement, and adoption of enterprise data and analytics products used across multiple DoD organizations.

• Design, plan, and execute continuity and disaster‑recovery exercises to assess and strengthen operational resilience and readiness.
• Coordinate and facilitate table‑top and functional exercises with teams and interagency partners to validate crisis‑response procedures and identify gaps.
• Evaluate recovery plans, document findings, and recommend updates to ensure rapid, coordinated restoration of services during disruptions.
• Support the development and maintenance of continuity documentation, ensuring alignment with organizational policies and federal COOP requirements.
• Design, implement, and operate Cybersecurity Incident and Spillage processes and procedures for collecting, tracking, diagnosing, and resolving all System cybersecurity incidents and spillage incidents.
• Prepare, maintain, and execute a Cybersecurity Incident and Spillage response approach that defines System cybersecurity incident and spillage response processes and procedures.
• Establish and operate the System Cybersecurity Incident and Spillage response process as part of overall System Incident Response operations.
• Identify, track, and report all System cybersecurity incident and spillage incidents.
• Categorize and prioritize all System cybersecurity incident and spillage incidents in accordance with Government specified guidance.
• Investigate and diagnose cybersecurity incident and spillage incidents and coordinate with all affected external organizations.
• Resolve, recover, and close cybersecurity incident and spillage incidents.
• Monitor and evaluate cybersecurity incident and spillage incident response operations to identify and implement continuous process improvement.
• Collaborate with cross‑functional teams to ensure comprehensive incident response and recovery strategies.
• Provide training and guidance to team members on disaster recovery and incident response best practices.

• Bachelor’s degree or higher from an accredited college or university OR offerings listed in DoD 8140 Training Repository OR GCFA or GCIA certification.
• Minimum of 5 years of experience in disaster recovery, continuity planning, or a related field.
• Experience with designing and executing continuity and disaster‑recovery exercises.
• Strong understanding of cybersecurity incident response and spillage processes.
• Experience with developing and maintaining continuity documentation.
• Ability to categorize, prioritize, and manage cybersecurity incidents.
• Strong analytical and problem‑solving skills.
• Excellent communication and coordination skills.
• Top Secret clearance required to start.

• TS/SCI clearance.
• Experience with the Department of Defense (DoD) or other federal agencies.
• Familiarity with federal COOP requirements.
• Experience with or similar data, analytics, and AI platforms.
• Knowledge of DoD cybersecurity policies and procedures.
• Advanced certifications such as CISSP, CISM, or CISA.
• Experience with incident response tools and technologies.
• Strong project management skills.

Pay Range $ – $

March 6, 2026

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.