Cyber Security Engineer (SME)

Leidos•Bethesda, MD

3d•$154,050 - $278,475

About The Position

Leidos is seeking a Cybersecurity Engineer SME for its Intel Sector Analysis Solutions Business Area. The role protects customer information systems, networks, and infrastructure from cyber threats and vulnerabilities. It supports the design, implementation, and maintenance of security controls for mission systems and helps ensure compliance with applicable cybersecurity policies, standards, and regulatory frameworks. The engineer works with Information Systems Security Engineers and Managers, software developers, systems engineers, and government stakeholders throughout the DevSecOps lifecycle. The position encompasses cybersecurity engineering activities including implementation of security technologies, incident response support, and verification that systems meet security and compliance standards.

Requirements

Master’s degree and 15 or more years of prior relevant experience; additional years of experience may substitute for a degree.
Active TS/SCI with a Polygraph.
Experience implementing and managing SIEM tools such as Splunk or similar platforms.
Experience with endpoint and network security technologies, including IDS/IPS, HBSS/Trellix, Carbon Black EDR, and related defensive security tools.
Experience reviewing and analyzing cybersecurity event logs to identify indicators of compromise or suspicious activity.
Experience supporting incident response plans, vulnerability management programs, risk management plans, and POA&Ms.
Experience conducting or supporting technical cybersecurity assessments and security audits.
Experience identifying system vulnerabilities and non-compliance with cybersecurity standards and regulatory requirements.
Experience collaborating with DevSecOps teams to review vulnerability scan results and support remediation.
Experience supporting RMF authorization by reviewing security documentation and providing risk-based recommendations for ATO activities.
Experience managing and tracking POA&Ms for customer-sponsored systems and coordinating with relevant security stakeholders.
Experience applying system security engineering principles in system security design, lifecycle engineering, authentication and authorization, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control.
Professional cybersecurity certification such as Security+, CISSP, CySA+, CEH, or GCIH.

Nice To Haves

Experience with tools such as Rapid7, Tenable/Nessus, HBSS/Trellix, SonarQube, Fortify, Chainguard, or EDR platforms, and with STIG viewers and compliance tools for assessing security configuration baselines.
Experience implementing and managing network and application firewalls, incident detection platforms, and digital forensic tools.
Experience with automation tools such as Ansible or CloudFormation for infrastructure and security automation.
Experience in Agile software development environments and with scripting or programming languages such as Python or PowerShell.
Familiarity with cloud environments including AWS, Oracle Cloud, or Google Cloud Platform.
Experience with system monitoring and health tools such as SolarWinds.
Experience with DevSecOps pipelines and CI/CD security tools.
Experience administering or securing Linux systems, including Red Hat.

Responsibilities

Plan, implement, manage, monitor, and upgrade security controls and tools for enterprise systems and networks, identifying opportunities to automate repeatable operations tasks.
Design, configure, implement, troubleshoot, and maintain security technologies, including firewalls or security groups, endpoint protection tools, and SIEM platforms such as Splunk.
Use SIEM tools such as Splunk Enterprise Security to monitor system and network security, detect potential threats or anomalous activity, and support analysis and response.
Support investigation and remediation of cybersecurity incidents, including breaches and malware infections.
Participate in change management to help ensure system changes maintain security compliance and do not introduce vulnerabilities.
Audit systems and configurations for compliance with cybersecurity policies, standards, and secure configuration baselines.
Collaborate with engineering, development, and operations teams to integrate security controls into DevSecOps pipelines and system architectures.
Monitor security advisories, bulletins, and threat intelligence for current vulnerabilities, threats, and trends.
Assist in implementing and enforcing secure system configurations and cybersecurity compliance requirements.
Support vulnerability management by reviewing scan results, assessing risk, and coordinating remediation with system owners and technical teams.
Support incident response plans, vulnerability and risk management programs, and Plans of Action and Milestones (POA&Ms).
Conduct or support technical cybersecurity assessments and security audits; identify vulnerabilities and non-compliance with cybersecurity requirements.
Support RMF authorization and ATO activities by reviewing security documentation and providing risk-based recommendations on system risk posture.
Manage and track POA&Ms for customer-sponsored systems, coordinating with ISSOs, ISSEs, ISSMs, and Security Control Assessors.
Apply system security engineering principles across system design and lifecycle engineering, authentication and authorization, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control.