Cyber Security Engineer-Technical Lead

Leidos; United States; On-site; USD 154,050 - 278,475; Full time

Benefits offered by this job

401(k) with 6% company match

Paid time off

Technical upskilling support

Flexible schedules

Job summary

Leidos has an exciting opportunity for a Cyber Security Engineer-Technical Lead in the Intel Security Sector's Analysis Solutions Business Area. This role focuses on protecting customer information systems from cyber-attacks, involving both technical engineering and leadership responsibilities.

The candidate must have extensive experience with security technologies such as firewalls, VPNs, and SIEM tools. The position offers competitive compensation, flexible schedules, and extensive benefits.

Qualifications

• Master's degree and 15+ years of relevant experience required.
• Experience with firewalls, VPNs, IDS/IPS technologies.
• Previous use of automation tools in production environments.

Responsibilities

• Plan and manage security controls for systems.
• Design and troubleshoot security technologies.
• Respond to security-related events and assist in remediation.

Skills

Experience implementing SIEM tools

Endpoint and network security technologies

Automation tools like Ansible

Technical leadership

Troubleshooting security technologies

Monitoring security advisories

Education

Master's degree

Tools

Splunk

Ansible

CloudFormation

Job description

Description

Leidos has an exciting opportunity for a Cyber Security Engineer-Technical Lead in our Intel Security Sector's Analysis Solutions Business Area. The role focuses on protecting the customer’s information systems and networks from potential cyber-attacks and involves hands-on technical engineering as well as providing technical leadership.

Job Summary

The Cyber Security Engineer – Technical Lead will dedicate approximately 75% of the time to direct technical work such as troubleshooting and implementation, while providing technical leadership and coordination across the security team. The candidate must understand and utilize firewalls (security groups), VPNs, Data Loss Prevention, IDS/IPS, Web-Proxy, security audits, and other security tools. The role collaborates with team leads, developers, operations personnel, and other technical leads throughout a DevSecOps lifecycle. This is not a supervisory management role; success is measured by technical contribution and resolution of complex security issues.

Primary Responsibilities

• Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while automating repeatable operations tasks.
• Design, configure, implement, troubleshoot and maintain security technologies such as firewalls, endpoint protection tools, and SIEM platforms (e.g., Splunk).
• Formulate systems and methodologies, respond to security-related events, and assist in remediation of cyber-security incidents.
• Participate in change management processes to ensure changes maintain security compliance and do not introduce new vulnerabilities.
• Conduct routine vulnerability scanning and assessment activities, provide formal and informal reports to technical teams, and track remediation efforts to closure.
• Provide technical leadership and subject-matter expertise to the security engineering team while coordinating with peer technical leads across infrastructure and application domains.
• Serve as the primary technical escalation point for complex or cross-domain security issues, mentoring junior engineers through collaborative troubleshooting.

Basic Qualifications

• Experience implementing and managing SIEM tools such as Splunk or similar platforms.
• Experience working with endpoint and network security technologies, including IDS/IPS and related security tools.
• Expertise with automation tools such as Ansible or CloudFormation.
• Demonstrated history of personally implementing, troubleshooting, and maintaining security technologies in production environments.
• Proven ability to balance technical leadership responsibilities with significant hands-on engineering work; strong attention to detail and analytical problem-solving skills.
• Monitor security advisories, bulletins, and industry threat intelligence to stay informed of current vulnerabilities, threats, and trends.
• Requires master’s degree and 15 or more years of prior relevant experience, or an equivalent substitution. Active TS/SCI with polygraph security clearance is required.

Preferred Qualifications

• Experience with additional security tools and processes such as IDS/IPS, VPN, GitHub, GitLab, SonarQube.
• Experience implementing and managing network and application firewalls, virtual private networks, incident detection, incident response, and forensics.
• Experience with Agile software development processes/environments and scripting/programming languages such as Python or PowerShell.
• Familiarity with cloud computing services (AWS, Oracle, Google).
• Knowledge of potential attack vectors such as XSS, injection, hijacking, and social engineering.
• Experience with health monitoring tools (SolarWinds) and using STIG viewers/tools to assess compliance with standards.
• Experience with database systems, search engines, web applications, Linux Red Hat environments, and Windows environments.

Benefits

Competitive compensation, paid time off, 11 paid holidays, 401(k) with a 6% company match and immediate vesting, flexible schedules, discounted stock purchase plans, technical upskilling, education and training support, parental paid leave, and more.

Pay Range

$154,050.00 - $278,475.00

Equal Opportunity Statement

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.