Cyber Security Engineer Journeyman

Leidos; Tampa (FL); On-site; USD 110,000 - 160,000; Full time

Job summary

Leidos is seeking a Journeyman Cyber Security Engineer (Microsoft) to support USSOCOM’s EDAT Zero Trust initiative. You will implement and maintain Microsoft security technologies such as Sentinel, Defender, Purview, Entra ID, and Logic Apps to strengthen DoD security posture.

The role requires TS/SCI clearance and 3–8 years of enterprise cybersecurity experience, with the ability to work under senior engineers and contribute to RMF artifacts and ATO processes.

Qualifications

• Bachelor's degree in a related field with 4–8 years of relevant experience or equivalent
• Experience supporting enterprise cybersecurity using Microsoft security platforms
• Hands-on experience with RMF documentation and ATO lifecycle
• Active TS/SCI clearance with SCI eligibility is required
• Experience implementing or maintaining Microsoft security technologies within a DoD Zero Trust program

Responsibilities

• Support implementation, configuration, and maintenance of Microsoft security technologies within Zero Trust architecture
• Administer or support Microsoft Sentinel, Defender, Purview, Entra ID, Logic Apps, and related security services
• Configure analytics rules, dashboards, alerts, and automation workflows for threat detection
• Support UEBA, SOAR, and security monitoring using Microsoft platforms
• Assist with RMF documentation, security controls, and ATO artifacts
• Collaborate with ISSOs and government stakeholders on Zero Trust initiatives
• Perform vulnerability assessments and STIG implementation activities
• Support incident response, investigations, and security monitoring efforts
• Document engineering procedures and operational processes
• Identify improvements to security monitoring and automation

Skills

TS/SCI clearance

Microsoft security platforms

Windows

Linux

RMF documentation

DISA STIG

IAT Level II certification

DoD RMF

Threat monitoring

Education

Bachelor's degree

Tools

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Purview

Microsoft Entra ID

Logic Apps

Behavior Analytics

Job description

Description

Leidos Digital is seeking a Journeyman Cyber Security Engineer (Microsoft) to support the U.S. Special Operations Command (USSOCOM) Enterprise Development, Application and Training (EDAT) Zero Trust initiative. This position provides engineering and operational support for Microsoft's enterprise security platform, helping implement and maintain Zero Trust security capabilities across identity, endpoint, data, and security operations.

The Journeyman Cyber Security Engineer will support the integration of Microsoft security technologies—including Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and Behavior Analytics—to strengthen the Department of Defense (DoD) Visibility and Analytics pillar while enabling security automation and orchestration. Working alongside senior engineers and cybersecurity professionals, this role supports engineering, operational, and RMF activities that improve the organization's security posture.

This Journeyman role is intended for cybersecurity engineers with solid experience supporting Microsoft security technologies who can independently execute engineering and operational tasks while working under the technical leadership of senior engineers in support of USSOCOM's Zero Trust implementation.

Active Top Secret clearance with SCI eligibility (TS/SCI) is REQUIRED to be considered for this opportunity.

Key Responsibilities

• Support the implementation, configuration, and maintenance of Microsoft security technologies within the Zero Trust architecture.
• Assist with deployment and administration of Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and related Microsoft security services.
• Configure and tune analytics rules, workbooks, dashboards, alerts, and automation workflows to improve threat detection and response.
• Support User and Entity Behavior Analytics (UEBA) and Security Orchestration, Automation, and Response (SOAR) capabilities using Microsoft security platforms.
• Assist with integrating security telemetry from Microsoft and third-party enterprise systems.
• Collaborate with ISSOs, cybersecurity engineers, system administrators, and government stakeholders supporting the Zero Trust initiative.
• Support RMF activities, including documentation updates, implementation of security controls, and maintenance of Authorization to Operate (ATO) artifacts.
• Assist with vulnerability assessments, system hardening, and implementation of DISA Security Technical Implementation Guides (STIGs).
• Troubleshoot Microsoft security platform issues and assist with resolving operational challenges.
• Participate in cybersecurity investigations, incident response, and security monitoring activities.
• Document engineering procedures, technical configurations, and operational processes.
• Recommend improvements to security monitoring, automation, and enterprise cybersecurity processes.
• Support continuous improvement initiatives while following cybersecurity best practices.

Required Qualifications

• Active Top Secret clearance with SCI eligibility (TS/SCI).
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field; and 4 – 8 years of relevant experience may be substituted for a degree.
• Three or more (3+) years of experience supporting enterprise cybersecurity, Microsoft security platforms, or systems engineering.
• Experience administering or supporting Microsoft enterprise security solutions.
• Experience with one or more of the following:
• Microsoft Sentinel
• Microsoft Defender XDR
• Microsoft Purview
• Microsoft Entra ID
• Microsoft Logic Apps
• Microsoft Behavior Analytics
• Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
• Working knowledge of Windows and Linux operating systems.
• Familiarity with enterprise identity, endpoint, cloud, and security architectures.
• Experience supporting RMF documentation or cybersecurity compliance activities.
• Knowledge of DISA STIG implementation and cybersecurity best practices.
• DoD 8140 / 8570 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent) with the ability to obtain IAT Level III within an approved timeframe if required.

Preferred Qualifications

• Microsoft certifications such as:
• SC-100: Microsoft Cybersecurity Architect
• SC-200: Microsoft Security Operations Analyst
• SC-300: Microsoft Identity and Access Administrator
• AZ-500: Microsoft Azure Security Engineer Associate
• Experience with scripting or automation using PowerShell, Python, Bash, or C#.
• Experience integrating Microsoft security products with third-party security tools.
• Familiarity with MITRE ATT&CK and threat detection engineering.
• Familiarity with Department of Defense and NSA Zero Trust guidance.
• Experience supporting the DoD RMF process and Authorization to Operate (ATO) lifecycle.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.