Senior Security Engineer

00160 LEIDOS AUSTRALIA PTY LTD.; North Canberra; Presencial; AUD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Leidos in Canberra is seeking a Senior Security Engineer to join the GEO SPACES mission critical networks. You will report to the GEO SPACES Security Operations Team Lead and work with Cyber Security Analysts to harden systems and manage central SIEM.

Ideal candidates have 5–10 years in security operations, Australian citizenship with a TSPV clearance or ability to obtain DISA/OSA, and a track record of implementing security controls across Linux/Windows environments.

Formación

• 5–10 years of security operations experience.
• Australian citizen with a TSPV clearance; DISA/OSA eligibility.
• Ability to work independently and with cyber security teams.
• Experience with system security controls and SIEM onboarding.

Responsabilidades

• Review and implement OS, application, and network hardening per DSPF/ISM.
• Onboard systems logs to centralized SIEM; configure log forwarders.
• Deploy and configure security tools; perform detection engineering.
• Support incident response and threat intelligence activities.

Conocimientos

Splunk SIEM

AWS security

EDR/XDR

Cloud Firewalls

IDAM

SOE hardening

Windows AD

Group Policy

Descripción del empleo

GEO SPACES - Senior Security Engineer

Join Leidos & work on AGO GEO SPACES mission critical networks GEO SPACES Security Operations Capability TSPV, willing to undergo a DISA, located in Canberra. Due to the nature of the role, you must be an Australian Citizen who holds a TSPV security clearance; accompanied by the ability to be successful for a DISA/OSA.

Your New Role and Responsibilities

This role will report directly to the GEO SPACES Security Operations Team Lead and be capable of operating independently within the scope of their duties. There is an element of flexibility in this role based on available skills and experience. Security Engineers will work closely with the Cyber Security Analysts as well as independently to deliver the following functions: Do Work That Matters Primary roles and responsibilities: System security controls review and implementation – OS, application and network hardening in accordance with DSPF and ISM controls. System log on-boarding into centralized SIEM including log normalisation, log forwarder deployment and configuration. Security tool deployment and configuration. Detection engineering including testing, validation, playbook development and quality assurance. System security advice and collaboration with network and operations teams, including IT security engineering of; endpoint, network, gateway and other Configuration Items

• In-depth experience with: SIEM technologies – Splunk AWS and AWS security applications EDR/XDR tools Cloud and web application firewalls IDAM OS SOE hardening – Linux and Windows Windows AD, Server and group policies
• Secondary duties: Cyber Threat Intelligence platform and feed integration and maintenance Vulnerability Management platform and tools, integration and maintenance Quality Assurance and Control of SOC investigations and response Support complex and emergency Incident Response activities using a range of cloud and other response tools, techniques and procedures. Conduct Research, Development and Testing of novel and emerging technologies, threats and opportunities in the cyber security domain Support Hunt activities using industry frameworks Provide trusted advisory services Develop security operations related system requirements Change review and approvals Develop and maintain stakeholder relationships, including with partner SOCs and security authorities in and out of Defence.
• Join us at a pivotal time as we introduce multiple new systems over the first 12–18 months, creating exciting opportunities to shape and mature our evolving capability. During that period, it is expected that the following will mature within the Security Operations team: Team structure and alignment to capability delivery to support the larger team and expected higher cadence of work Process and procedure for both internal operations and engagement with external capabilities Reporting within the Leidos structure, the agency and other authorities.

What You’ll Bring to Make An Impact

Experience levels that are commensurate with various levels of security operations roles, a passion for IT security operations and the ability to work well as part of our team. This role will primarily focus on the on-boarding of new systems, ensuring that appropriate technical security controls are implemented and effective centralized monitoring can be achieved. It is expected that you will work independently from the central SOC for a significant amount of time, and closely with system engineering teams to achieve security specific requirements. When not on-boarding new systems, this role will work within the SOC Security Engineering team, in support of enduring activities listed in the ‘Secondary Duties’ section. This is a senior role, where candidates will have 5 – 10 years’ experience delivering the functions listed in Role Description, motivation to drive growth and maturation of existing capabilities and willingness to contribute to the growth of junior team members. Ideally, previous experience working in an AGO, ASD, other intelligence agencies or Defence, and an understanding of key stakeholders and processes associated with delivering security operations in a Defence context.

Due to the nature of the role, you must be an Australian Citizen who holds a TSPV security clearance; accompanied by the ability to be successful for a DISA/OSA.

Pay Range

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.