Cyber Security Engineer

Koitecc Solutions; Northern (KY); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Cybersecurity Engineer to provide engineering and operational cybersecurity support across the TOMCAT environment, integrating security requirements into enterprise IT operations, incident response, vulnerability management, system changes, patching, and service delivery.

The role works closely with TSA SOC, Information Assurance leadership, system owners, infrastructure engineers, ServiceNow teams, and operational service teams to identify, analyze, remediate, and track

Qualifications

• Bachelor's degree plus 8+ years in cybersecurity in enterprise or federal environment; additional years may substitute for degree.
• Knowledge of NIST cybersecurity principles and federal cybersecurity requirements.
• Experience with vulnerability management, remediation, POA&M, RMF, and security reporting.
• Knowledge of cybersecurity incident response processes.
• Experience working with enterprise security, endpoint, network, cloud, or infrastructure technologies.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to coordinate cybersecurity actions with technical operations without disrupting mission systems.
• Ability to obtain TSA Suitability and Public Trust Security Clearance.

Responsibilities

• Provide cybersecurity engineering and operational support for TOMCAT enterprise services.
• Support vulnerability management, security remediation, POA&M activities, RMF processes, and cybersecurity compliance reporting.
• Analyze vulnerability findings, security risks, remediation status, exceptions, and trends.
• Coordinate cybersecurity remediation activities with system owners, patch teams, and operations leads.
• Support detection, analysis, and response to cybersecurity incidents.
• Coordinate with TSA SOC, ISSOs, CIC, and technical service towers during cyber-related incidents.
• Analyze security alerts, indicators, affected assets, containment actions, and remediation status.
• Support security configuration, patching, hardening, monitoring, and technical-control activities.
• Maintain audit evidence, cybersecurity reporting artifacts, corrective-action records, and technical documentation.
• Support FISMA, NIST, TSA/DHS security requirements, and operational compliance activities.
• Integrate cybersecurity considerations into incident, change, release, configuration, and operational processes.
• Support security assessments and technical reviews of proposed changes and new technologies.
• Participate in root-cause analysis and lessons-learned activities following cybersecurity events.
• Maintain cybersecurity SOPs, runbooks, technical procedures, and knowledge articles.
• Provide technical recommendations to improve the security and resilience of enterprise services.

Skills

NIST principles

Incident response

Vulnerability management

Documentation

Communication

Coordination

Education

Bachelor's degree in a related field

Tools

SIEM

EDR

ServiceNow

RMF tooling

Job description

Leidos is seeking highly qualified professionals to support the TSA TOMCAT Program.

We are especially interested in connecting with current incumbent personnel supporting this mission who are interested in continuing their work and bringing their valuable mission knowledge and experience to Leidos.

Position Summary

The Cybersecurity Engineer provides engineering and operational cybersecurity support across the TOMCAT environment, integrating security requirements into enterprise IT operations, incident response, vulnerability management, system changes, patching, and service delivery.

The position works closely with TSA SOC personnel, Information Assurance leadership, system owners, infrastructure engineers, ServiceNow teams, and operational service teams to identify, analyze, remediate, and track cybersecurity risks while maintaining mission continuity.

Work Location

Remote, with onsite, surge, or shift support as required.

Essential Duties Could Include the following:

• Provide cybersecurity engineering and operational support for TOMCAT enterprise services.
• Support vulnerability management, security remediation, POA&M activities, RMF processes, and cybersecurity compliance reporting.
• Analyze vulnerability findings, security risks, remediation status, exceptions, and trends.
• Coordinate cybersecurity remediation activities with system owners, infrastructure engineers, patch teams, and operations leads.
• Support detection, analysis, and response to cybersecurity incidents.
• Coordinate with TSA SOC, ISSOs, CIC, and technical service towers during cyber-related incidents.
• Analyze security alerts, indicators, affected assets, containment actions, and remediation status.
• Support security configuration, patching, hardening, monitoring, and technical-control activities.
• Maintain audit evidence, cybersecurity reporting artifacts, corrective-action records, and technical documentation.
• Support FISMA, NIST, TSA/DHS security requirements, and operational compliance activities.
• Integrate cybersecurity considerations into incident, change, release, configuration, and operational processes.
• Support security assessments and technical reviews of proposed changes and new technologies.
• Participate in root-cause analysis and lessons-learned activities following cybersecurity events.
• Maintain cybersecurity SOPs, runbooks, technical procedures, and knowledge articles.
• Provide technical recommendations to improve the security and resilience of enterprise services.

Qualifications Could Include

Requirements will vary depending on the specific position and level. Qualifications may include:

• Bachelors degree and 8+ years of prior relevant experience with either cybersecurity engineering, information security, or information assurance experience in an enterprise or federal environment. Additional years of experience may be considered in lieu of degree.
• Knowledge of NIST cybersecurity principles and federal cybersecurity requirements.
• Experience with vulnerability management, remediation, POA&M, RMF, and security reporting.
• Knowledge of cybersecurity incident response processes.
• Experience working with enterprise security, endpoint, network, cloud, or infrastructure technologies.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to coordinate cybersecurity actions with technical operations without disrupting mission systems.
• Ability to obtain and maintain TSA Suitability
• Ability to obtain and maintain Public Trust Security Clearance

Required Certifications

• Security+.
• CISSP.
• CySA+.
• GCIH or GCIA.
• CAP/CGRC.

Preferred Qualifications

• TSA, DHS, or federal cybersecurity experience.
• Experience with SIEM, EDR, vulnerability-management, endpoint, network, cloud, or security-monitoring tools.
• Experience with ServiceNow security/incident workflows.
• Experience supporting RMF and FISMA environments.
• Zero Trust, cloud security, or enterprise security engineering experience.

Important Compensation Information

Please disregard the salary range displayed on this evergreen posting as representative of all TSA TOMCAT opportunities. This posting is intended to identify candidates across multiple functional areas and experience levels and, therefore, the displayed range may not reflect the compensation associated with an individual position. Compensation for specific opportunities will be determined based on the position for which an individual is considered or hired and may vary based on factors including experience level, skills, certifications, education, security clearance requirements, work location, and other position-specific considerations.

Original Posting

September 4, 2026

Pay Range

Pay Range $107,900.00 - $195,050.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

#Remote