Cyber Security Engineer (Microsoft)

VulnU; Tampa (FL); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

Retirement match

Paid parental leave

Equity

Learning budget

Job summary

Leidos is seeking a Journeyman Cyber Security Engineer (Microsoft) to support USSOCOM’s EDAT Zero Trust initiative in Tampa, FL. You will engineer and operate Microsoft security technologies to strengthen DoD visibility, analytics, and automation across identity, endpoint, data, and security operations.

You will collaborate with ISSOs and engineers to maintain RMF artifacts, perform vulnerability assessments, and participate in incident response and monitoring tasks.

Qualifications

• Active Top Secret clearance with SCI eligibility (TS/SCI).
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering OR 8140 certification.
• DoD 8140 Certifications such as SecurityX, CASP, CCSP, Cloud, CSC, GCLD, GCSA, or GSEC are preferred.

Responsibilities

• Support the implementation, configuration, and maintenance of Microsoft security technologies within Zero Trust.
• Assist with deployment and administration of Microsoft Sentinel, Defender, Purview, Entra ID, Logic Apps, and related services.
• Configure analytics rules, dashboards, alerts, and automation workflows for threat detection and response.
• Assist with EU/UEBA and SOAR capabilities using Microsoft security platforms.
• Support RMF documentation updates and ATO artifacts.

Skills

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Purview

Microsoft Entra ID

Logic Apps

UEBA

SOAR

RMF

DISA STIGs

Windows

Linux

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering

8140 certification (SecurityX / CASP / CCSP / Cloud / CSC / GCLD / GCSA / GSEC)

Tools

PowerShell

Python

Bash

C#

Job description

# Cyber Security Engineer (Microsoft)Leidos · leidos.comCategory: Detection & ResponseLocation: Tampa, FLSalary: $87,100 – $157,450Clearance: TS/SCI## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Retirement match* Paid parental leave* Equity* Learning budgetLeidos is seeking a Journeyman Cyber Security Engineer (Microsoft) to support the U.S. Special Operations Command (USSOCOM) Enterprise Development, Application and Training (EDAT) Zero Trust initiative. This position provides engineering and operational support for Microsoft's enterprise security platform, helping implement and maintain Zero Trust security capabilities across identity, endpoint, data, and security operations.The Journeyman Cyber Security Engineer will support the integration of Microsoft security technologies—including Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and Behavior Analytics—to strengthen the Department of Defense (DoD) Visibility and Analytics pillar while enabling security automation and orchestration. Working alongside senior engineers and cybersecurity professionals, this role supports engineering, operational, and RMF activities that improve the organization's security posture.Key ResponsibilitiesSupport the implementation, configuration, and maintenance of Microsoft security technologies within the Zero Trust architecture.Assist with deployment and administration of Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and related Microsoft security services.Configure and tune analytics rules, workbooks, dashboards, alerts, and automation workflows to improve threat detection and response.Support User and Entity Behavior Analytics (UEBA) and Security Orchestration, Automation, and Response (SOAR) capabilities using Microsoft security platforms.Assist with integrating security telemetry from Microsoft and third-party enterprise systems.Collaborate with ISSOs, cybersecurity engineers, system administrators, and government stakeholders supporting the Zero Trust initiative.Support RMF activities, including documentation updates, implementation of security controls, and maintenance of Authorization to Operate (ATO) artifacts.Assist with vulnerability assessments, system hardening, and implementation of DISA Security Technical Implementation Guides (STIGs).Troubleshoot Microsoft security platform issues and assist with resolving operational challenges.Participate in cybersecurity investigations, incident response, and security monitoring activities.Document engineering procedures, technical configurations, and operational processes.Recommend improvements to security monitoring, automation, and enterprise cybersecurity processes.Support continuous improvement initiatives while following cybersecurity best practices.Required QualificationsActive Top Secret clearance with SCI eligibility (TS/SCI).Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering OR 8140 certificationOne of the DoD 8140 Certifications - SecurityX / CASP , CCSP, Cloud , CSC, GCLD, GCSA, or GSECThree or more years of experience supporting enterprise cybersecurity, Microsoft security platforms, or systems engineering.Experience administering or supporting Microsoft enterprise security solutions.Experience with one or more of the following:Microsoft SentinelMicrosoft Defender XDRMicrosoft PurviewMicrosoft Entra IDMicrosoft Logic AppsMicrosoft Behavior AnalyticsExperience supporting SIEM, SOAR, UEBA, or security monitoring operations.Working knowledge of Windows and Linux operating systems.Familiarity with enterprise identity, endpoint, cloud, and security architectures.Experience supporting RMF documentation or cybersecurity compliance activities.Knowledge of DISA STIG implementation and cybersecurity best practices.Preferred QualificationsMicrosoft certifications such as:SC-100: Microsoft Cybersecurity ArchitectSC-200: Microsoft Security Operations AnalystSC-300: Microsoft Identity and Access AdministratorAZ-500: Microsoft Azure Security Engineer AssociateExperience with scripting or automation using PowerShell, Python, Bash, or C#.Experience integrating Microsoft security products with third-party security tools.Familiarity with MITRE ATT&CK and threat detection engineering.Familiarity with Department of Defense and NSA Zero Trust guidance.Experience supporting the DoD RMF process and Authorization to Operate (ATO) lifecycle.Familiarity with USSOCOM SOFNET or other DoD enterprise environments.Physical RequirementsMust be able to remain in a stationary position approximately 50% of the time.Occasionally move throughout the office to access equipment, communicate with team members, and support operational requirements.Ability to communicate effectively with customers and team members through in-person, telephone, email, and virtual collaboration platforms.Clearance RequirementActive Top Secret (TS) clearance with SCI eligibility is required prior to start.This Journeyman role is intended for cybersecurity engineers with solid experience supporting Microsoft security technologies who can independently execute engineering and operational tasks while working under the technical leadership of senior engineers in support of USSOCOM's Zero Trust implementation.If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.Original Posting:October 30, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.Pay Range:Pay Range $87,100.00 - $157,450.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.