Cyber Security Engineer (Microsoft)
About The Position
Leidos is seeking a Journeyman Cyber Security Engineer (Microsoft) to support the U.S. Special Operations Command (USSOCOM) Enterprise Development, Application and Training (EDAT) Zero Trust initiative. The role provides engineering and operational support for Microsoft's enterprise security platform, helping implement and maintain Zero Trust capabilities across identity, endpoint, data, and security operations. The engineer supports integration and administration of Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and Behavior Analytics. The position contributes to the Department of Defense Visibility and Analytics pillar and supports security automation and orchestration. Working with senior engineers and cybersecurity professionals, the engineer performs engineering, operational, and Risk Management Framework (RMF) activities to improve the organization's security posture. This Journeyman role is intended for cybersecurity engineers who can independently execute engineering and operational tasks under the technical leadership of senior engineers. An active Top Secret clearance with SCI eligibility is required prior to starting. The position has physical requirements that include remaining stationary approximately 50% of the time, occasional movement around the office, and effective communication with customers and team members through in-person, telephone, email, and virtual collaboration platforms.
Requirements
- Active Top Secret clearance with SCI eligibility (TS/SCI); clearance is required prior to start.
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or Engineering, or a DoD 8140 certification.
- One DoD 8140 certification: SecurityX/CASP+, CCSP, Cloud+, CSC, GCLD, GCSA, or GSEC.
- Three or more years of experience supporting enterprise cybersecurity, Microsoft security platforms, or systems engineering.
- Experience administering or supporting Microsoft enterprise security solutions.
- Experience with one or more of Microsoft Sentinel, Microsoft Defender XDR, Microsoft Purview, Microsoft Entra ID, Microsoft Logic Apps, or Microsoft Behavior Analytics.
- Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
- Working knowledge of Windows and Linux operating systems.
- Familiarity with enterprise identity, endpoint, cloud, and security architectures.
- Experience supporting RMF documentation or cybersecurity compliance activities.
- Knowledge of DISA STIG implementation and cybersecurity best practices.
Nice To Haves
- Microsoft certifications such as SC-100: Microsoft Cybersecurity Architect, SC-200: Microsoft Security Operations Analyst, SC-300: Microsoft Identity and Access Administrator, or AZ-500: Microsoft Azure Security Engineer Associate.
- Experience with scripting or automation using PowerShell, Python, Bash, or C#.
- Experience integrating Microsoft security products with third-party security tools.
- Familiarity with MITRE ATT&CK and threat detection engineering.
- Familiarity with Department of Defense and NSA Zero Trust guidance.
- Experience supporting the DoD RMF process and Authorization to Operate (ATO) lifecycle.
- Familiarity with USSOCOM SOFNET or other DoD enterprise environments.
Responsibilities
- Support implementation, configuration, and maintenance of Microsoft security technologies within the Zero Trust architecture.
- Assist with deployment and administration of Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and related Microsoft security services.
- Configure and tune analytics rules, workbooks, dashboards, alerts, and automation workflows to improve threat detection and response.
- Support User and Entity Behavior Analytics (UEBA) and Security Orchestration, Automation, and Response (SOAR) capabilities using Microsoft security platforms.
- Assist with integrating security telemetry from Microsoft and third-party enterprise systems.
- Collaborate with ISSOs, cybersecurity engineers, system administrators, and government stakeholders supporting the Zero Trust initiative.
- Support RMF activities, including documentation updates, security control implementation, and maintenance of Authorization to Operate (ATO) artifacts.
- Assist with vulnerability assessments, system hardening, and implementation of DISA Security Technical Implementation Guides (STIGs).
- Troubleshoot Microsoft security platform issues and assist with resolving operational challenges.
- Participate in cybersecurity investigations, incident response, and security monitoring activities.
- Document engineering procedures, technical configurations, and operational processes.
- Recommend improvements to security monitoring, automation, and enterprise cybersecurity processes.
- Support continuous improvement initiatives while following cybersecurity best practices.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
