SME Disaster Recovery Analyst

Leidos•Alexandria, VA

About The Position

This Department of War enterprise data and analytics program delivers mission-critical capabilities that enable leaders across the Department to make faster, better-informed decisions using trusted data at scale. Leidos Digital Modernization sector is seeking an experienced SME Disaster Recovery Analyst to support the delivery, enhancement, and adoption of enterprise data and analytics products used across multiple DoD organizations. In this role, you will work alongside government partners, engineers, and other industry teammates to translate operational and strategic requirements into scalable, production-ready solutions. You will contribute directly to product planning, execution, and continuous improvement—helping ensure capabilities are delivered efficiently, aligned to mission priorities, and positioned for sustained success. This position offers the opportunity to work on a high-visibility, enterprise program at the intersection of data, analytics, and emerging AI technologies. Ideal candidates are motivated by mission impact, comfortable operating in complex stakeholder environments, and interested in building deep domain expertise while delivering capabilities with real-world national security outcomes.

Requirements

Bachelor’s degree or higher from an accredited college or university OR offerings listed in DoD 8140 Training Repository OR GCFA or GCIA certification.
Minimum of 5 years of experience in disaster recovery, continuity planning, or a related field.
Experience with designing and executing continuity and disaster-recovery exercises.
Strong understanding of cybersecurity incident response and spillage processes.
Experience with developing and maintaining continuity documentation.
Ability to categorize, prioritize, and manage cybersecurity incidents.
Strong analytical and problem-solving skills.
Excellent communication and coordination skills.
Top Secret clearance required to start.

Nice To Haves

TS/SCI clearance.
Experience with the Department of Defense (DoD) or other federal agencies.
Familiarity with federal COOP requirements.
Experience with or similar data, analytics, and AI platforms.
Knowledge of DoD cybersecurity policies and procedures.
Advanced certifications such as CISSP, CISM, or CISA.
Experience with incident response tools and technologies.
Strong project management skills.

Responsibilities

Design, plan, and execute continuity and disaster-recovery exercises to assess and strengthen operational resilience and readiness.
Coordinate and facilitate table-top and functional exercises with teams and interagency partners to validate crisis-response procedures and identify gaps.
Evaluate recovery plans, document findings, and recommend updates to ensure rapid, coordinated restoration of services during disruptions.
Support the development and maintenance of continuity documentation, ensuring alignment with organizational policies and federal COOP requirements.
Design, implement, and operate Cybersecurity Incident and Spillage processes and procedures for collecting, tracking, diagnosing, and resolving all System cybersecurity incidents and spillage incidents.
Prepare, maintain, and execute a Cybersecurity Incident and Spillage response approach that defines System cybersecurity incident and spillage response processes and procedures.
Establish and operate the System Cybersecurity Incident and Spillage response process as part of overall System Incident Response operations.
Identify, track, and report all System cybersecurity incident and spillage incidents.
Categorize and prioritize all System cybersecurity incident and spillage incidents in accordance with Government specified guidance.
Investigate and diagnose cybersecurity incident and spillage incidents and coordinate with all affected external organizations.
Resolve, recover, and close cybersecurity incident and spillage incidents.
Monitor and evaluate cybersecurity incident and spillage incident response operations to identify and implement continuous process improvement.
Collaborate with cross-functional teams to ensure comprehensive incident response and recovery strategies.
Provide training and guidance to team members on disaster recovery and incident response best practices.