Security Engineer Cybersecurity Monitor

Leidos•Alexandria, VA

6d•$87,100 - $157,450•Onsite

About The Position

Leidos is seeking an experienced Cybersecurity Monitoring Engineer to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC. The Cybersecurity Monitoring Engineer will support enterprise cybersecurity monitoring and oversight of the tools used to protect DHRA systems and networks. This position will assess the health, configuration, coverage, connectivity, and effectiveness of cybersecurity capabilities; identify gaps and failures; support technical troubleshooting; and provide recommendations that improve the organization’s cybersecurity posture. The DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). Cybersecurity operations within this environment depend on coordinated monitoring and oversight across DMDC cybersecurity organizations, IT operations, system owners, and external Cybersecurity Service Providers (CSSPs). The Cybersecurity Monitoring Engineer will help ensure that Government-mandated cybersecurity capabilities are deployed, functioning, connected, reporting correctly, and providing the coverage necessary to identify and reduce enterprise cyber risk.

Requirements

Bachelor of Science degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical discipline with 4 or more years of relevant professional experience. Specific experience, education and training may be considered in lieu of degree.
Experience supporting cybersecurity monitoring, security engineering, cybersecurity operations, or enterprise security-tool environments.
Experience evaluating the configuration, connectivity, availability, coverage, or operational status of cybersecurity tools and capabilities.
Experience identifying technical issues and working across multiple organizations to troubleshoot and resolve cybersecurity-tool or infrastructure problems.
Experience reviewing cybersecurity findings, system status, or technical data to identify deficiencies and recommend corrective actions.
Working knowledge of Department of Defense cybersecurity requirements, NIST security guidance, or comparable Federal cybersecurity standards.
Ability to develop and maintain technical procedures, monitoring documentation, metrics, and status reporting.
Ability to communicate technical issues clearly to Government, engineering, cybersecurity, and IT operations stakeholders.
U.S. Citizenship required.
Active Secret security clearance required.

Nice To Haves

Experience supporting Department of Defense enterprise cybersecurity monitoring or cybersecurity operations.
Experience working with Cybersecurity Service Providers or comparable enterprise security operations organizations.
Experience supporting security scanning, vulnerability management, endpoint security, network-security monitoring, or other enterprise cybersecurity capabilities.
Experience validating cybersecurity-tool coverage against enterprise asset inventories.
Experience developing corrective action or get-well plans and tracking technical deficiencies through closure.
Experience developing cybersecurity monitoring metrics, dashboards, or recurring operational status reports.
Experience troubleshooting integration, connectivity, configuration, data-rollup, or reporting issues between cybersecurity tools and enterprise systems.
Familiarity with Risk Management Framework requirements and the relationship between cybersecurity monitoring, continuous monitoring, and system authorization.
Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments.

Responsibilities

Monitor DHRA cybersecurity posture using Government-mandated and Government-provided cybersecurity tools and capabilities.
Support Tier 3 and shared Tier 2 cybersecurity monitoring and troubleshooting responsibilities in coordination with Cybersecurity Service Providers.
Validate cybersecurity tool configuration, deployment, operability, connectivity, data rollups, updates, and overall compliance with applicable DHRA, Department of Defense, and National Institute of Standards and Technology (NIST) requirements.
Assess whether required cybersecurity capabilities are deployed and operating across the appropriate DHRA systems, networks, and assets.
Compare cybersecurity-tool coverage against authoritative asset inventories to identify gaps, missing coverage, configuration issues, or systems that are not reporting as expected.
Identify and report tool failures, outages, connectivity issues, data-quality problems, and other conditions that may reduce cybersecurity visibility or effectiveness.
Open, document, track, and coordinate technical tickets through resolution and support troubleshooting with system owners, IT operations, tool administrators, Cybersecurity Service Providers, and other technical organizations.
Support development and monitoring of corrective action and get-well plans for identified cybersecurity tool or coverage deficiencies.
Validate corrective actions and document whether identified deficiencies have been successfully resolved.
Develop measurable and traceable cybersecurity monitoring metrics that provide Government leadership visibility into tool health, enterprise coverage, compliance, and unresolved issues.
Analyze recurring monitoring results to identify trends, systemic issues, and opportunities to improve cybersecurity capabilities.
Recommend cybersecurity tool enhancements, configuration improvements, or process changes based on monitoring results and identified operational gaps.
Document approved baseline changes and maintain cybersecurity monitoring tactics, techniques, and procedures (TTPs).
Support security scanning, mitigation activities, compliance cross-checking, and cybersecurity-system troubleshooting.
Review technical work products and monitoring results for accuracy, completeness, and compliance with established cybersecurity standards and requirements.