Senior Security Engineer

Leidos • Columbia, MD

2d • $131,300 - $237,350

About The Position

We are looking for a Security Engineer to own the security posture of the environments where we build, test, and deliver advanced AI-cyber capabilities. You will be embedded with software engineers, reverse engineers, and vulnerability researchers, hardening the infrastructure, supply chains and pipelines on while guiding their secure development. The work includes guiding and reviewing build integrity and supply chain review to threat modeling our own tooling. If you have ever looked at a supply chain & development environment and immediately started listing the ways you would secure it, this is the job. You will be the person the team trusts to tell them when something is a real risk and when it is just noise. As an AI Security Integration Engineer on our team, you will bridge the gap between traditional security infrastructure and modern programmatic defense. You will guide the secure development and evolution of software vulnerability tooling. Your primary focus will be working with the development team to maintainmaintaining the tool security posture utilizing continuous ATO. review workflows and pipelines by leveraging Python, assessing robust API integrations, maintained exploring AI/LLM orchestration to rapidly scale threat detection and response capabilities. Support ATO and continuous vuln management.

Requirements

• 15+ years Hands-on experience securing and hardening Linux systems at the OS and network layer
• Expertise in at least one scripting language (Python preferred)
• Working knowledge of network protocols, cryptographic fundamentals, and key management
• Experience with infrastructure-as-code and containerization (Ansible/Terraform, Docker/Kubernetes)
• Experience administering or securing a CI/CD system (GitLab CI, Jenkins, or similar)

Nice To Haves

• Experience working in accredited/classified environments, including cross-domain solutions
• Offensive security background — penetration testing, red team, or serious CTF experience
• Detection engineering or SIEM experience
• Experience with embedded, real-time, or otherwise constrained platforms
• Exposure to reverse engineering or vulnerability research
• Relevant certifications (CISSP, OSCP, GCIH) — useful, not required
• Non-human/agent identity and secrets management — short-lived credentials, scoping, and audit for autonomous actors, which is a genuinely different problem than human IAM.
• Sandboxing and egress control for code-executing agents.
• Familiarity with NIST AI RMF and the fact that continuous-ATO control automation now has to cover AI system controls, not just traditional ones.
• Using LLMs to accelerate the compliance grind control narrative drafting, evidence collection, POA&M triage.

Responsibilities

• 8+ years of professional experience in security engineering, secure software development, or infrastructure security.
• Experience securing and using agentic tooling for writing and maintaining production code, managing cloud infrastructure, and release management frameworks.
• Experience owning security outcomes for a technical product from ideation to production, and influencing engineering teams toward secure design without direct authority.
• Experience hardening software deployments, networks, and production infrastructure at scale.
• Experience securing software clusters for online/cloud as well as on-prem or air-gapped installations.
• Experience with threat modeling, vulnerability management, and secure development practices across first- and third-party code.
• Familiarity with NIST RMF, continuous ATO, and control automation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed