AI-Enhanced Security Infra Engineer

Via Logic LLC; Alexandria (VA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos in Reston, Virginia, seeks an AI & Security Infrastructure Integration Engineer to bridge traditional security infrastructure with programmatic defense. You will operate, maintain, and evolve the network security stack for a 24x7 SOC, transforming manual workflows into automated pipelines using Python, APIs, and AI/LLM orchestration.

Responsibilities include building Python tools, integrating RESTful APIs, evaluating AI/ML for alert triage, and maintaining IDS/IPS, SIEM, Netflow, and

Qualifications

• Bachelor's degree with 8+ years of professional experience, or equivalent military/work experience.
• 2+ years deploying and maintaining cybersecurity tools (IDS/IPS, SIEM, or firewalls).
• Strong knowledge of network protocols, traffic analysis, and routing/switching.
• Proficiency in Linux administration and Bash scripting.

Responsibilities

• Develop Python-based tools and frameworks to automate security tasks and health checks.
• Design, build, and integrate custom APIs to connect cybersecurity tools into a cohesive ecosystem.
• Evaluate AI/ML ideas and LLM solutions to optimize alert triage and incident analysis.
• Operate and upgrade core security capabilities (IDS/IPS, Netflow, SIEM, Linux, virtualization).
• Maintain diagrams and coordinate changes with Change Control Boards.

Skills

Python

RESTful APIs

Bash

Linux administration

Network protocols

IDS/IPS

SIEM

Ansible

Terraform

MITRE ATT&CK

SOC

Education

Bachelor's degree with 8+ years of professional experience

Tools

Ansible

Terraform

Puppet

Chef

Job description

Leidos in Reston, Virginia, seeks an AI & Security Infrastructure Integration Engineer to bridge traditional security infrastructure with programmatic defense. You will operate, maintain, and evolve the network security stack for a 24x7 SOC, transforming manual workflows into automated pipelines using Python, APIs, and AI/LLM orchestration.

Responsibilities include building Python tools, integrating RESTful APIs, evaluating AI/ML for alert triage, and maintaining IDS/IPS, SIEM, Netflow, and