AI & Security Infrastructure Integration Engineer

Leidos Inc; Alexandria (VA); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an AI & Security Infrastructure Integration Engineer to join our Alexandria, VA team. The role is hybrid with on-site majority and requires proximity to commutable distance.

You will automate security workflows, develop API integrations for SIEM/IDS/IPS and Netflow, and explore AI/LLM orchestration to scale threat detection and response for our SOC team.

Qualifications

• Bachelor's degree required; 8+ years of professional experience preferred.
• 2+ years deploying cybersecurity tools (SIEM/IDS/IPS or firewalls).
• Strong knowledge of network protocols, traffic analysis, and routing/switching.
• Proficiency in Linux and shell scripting (Bash).

Responsibilities

• Develop and maintain Python-based tools and automation for security infrastructure tasks and health checks.
• Design, build, and integrate APIs to connect cybersecurity tools into an orchestrated ecosystem.
• Evaluate and integrate AI/ML and LLM-based solutions to optimize alert triage and incident analysis for SOC.
• Operate, maintain, and upgrade core cybersecurity capabilities (IDS/IPS, Netflow, SIEM, Linux).
• Maintain network topology and elevation diagrams; ensure Change Control Board compliance.

Skills

Python scripting

RESTful APIs

Linux administration

Bash scripting

SOC experience

Networking basics

Education

Bachelor's degree

Tools

SIEM

IDS/IPS

firewalls

Ansible

Terraform

Job description

Description

Leidos is seeking an AI & Security Infrastructure Integration Engineer to join our team in Alexandria, VA. This is a hybrid position allowing partial telework, but the majority of the time is spent on-site and candidates must be within commutable distance.

Position Overview

As an AI & Security Infrastructure Integration Engineer on our team, you will bridge the gap between traditional security infrastructure and modern programmatic defense. You will operate, maintain, and evolve the network security infrastructure utilized by our 24x7x365 mission-critical security operations team. Your primary focus will be transforming manual workflows into automated pipelines by leveragingPython, developing robustAPI integrations, and exploringAI/LLM orchestrationto rapidly scale threat detection and response capabilities.

Primary Responsibilities

• Develop and maintain Python-based tools, scripts, and frameworks to automate routine security infrastructure tasks, policy deployments, and system health checks.
• Design, build, and integrate custom APIs to connect disparate cybersecurity tools (SIEM, IDS/IPS, Netflow, and threat intelligence feeds) into a cohesive, orchestrated ecosystem.
• Evaluate and integrate AI/ML technologies and LLM-based solutions to optimize alert triage, automate playbook generation, and accelerate incident analysis for the SOC team.
• Operate, maintain, and upgrade core cybersecurity capabilities (IDS/IPS, Netflow, SIEM, Snort, Linux, and Virtualization environments).
• Manage high-priority tasks, infrastructure outages, and routine patching/updates.
• Maintain precise network topology and elevation diagrams for all managed security equipment.
• Ensure strict adherence to government compliance standards and coordinate changes through official Change Control Boards (CCB).
• Advise and strategize with program and government leadership on engineering modern, code-driven security infrastructure solutions.

Required Clearance and Certifications

• Active DoD Secret Required with DoD TS/SCI Eligibility
• Must have DoD 8570 IAT II certification OR meet DoD 8140 Intermediate Cyber Defense Infrastructure Support Specialist requirements prior to start
• Must obtain DOD-8570 CSSP Infrastructure Support certification within 6 months of hire.

Required Qualifications

• Bachelor's degree with 8+ years of professional experience (additional relevant military or work experience may be considered in lieu of a degree).
• 2+ years of hands-on experience deploying and maintaining cybersecurity tools (especially IDS/IPS, SIEM, or firewalls).
• Strong, practical knowledge of network protocols, traffic analysis, and routing/switching.
• Proficiency in Linux administration and shell scripting (Bash).

Preferred Qualifications

• Strong proficiency inPython(specifically writing scripts for system automation, network interaction, and data parsing).
• Demonstrated experience working with RESTful APIs, JSON/YAML data structures, and webhooks to integrate security platforms.
• Exposure utilizing or fine-tuning AI/ML models, prompt engineering, or integrating AI APIs into operational workflows.
• Hands-on experience with automation/orchestration frameworks (e.g., Ansible, Terraform, Puppet, or Chef).
• Practical familiarity with Intelligence-Driven Defense, the Cyber Kill Chain, and mapping controls to the MITRE ATT&CK framework.
• Prior experience working as or directly supporting a Security Operations Center (SOC) analyst team.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Pay Range:Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.