Cybersecurity Engineer

Leidos Inc; Orlando (FL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a cybersecurity engineer to collaborate with the ISSE as a subject matter expert in advanced security engineering, RMF/ATO compliance, and vulnerability management. Responsibilities include securing Windows and Linux environments, conducting scans and remediation, and supporting documentation for ATO packages.

The role requires a DoD Secret clearance, 5+ years of related experience, and expertise with tools like Nessus, Splunk, Trellix, ACAS, and eMASS.

Qualifications

• Bachelor's degree in a related field and (5) five or more years of related actual work experience.
• Active DoD Secret security clearance.
• Compliant with DoD 8140 requirements.
• RMF, especially in supporting Step 6.
• Experience with host-based and network-based scanning tools.
• Install, configure, test, deploy, and O&M of enterprise-wide cybersecurity tools.

Responsibilities

• Capture and refine information security requirements and ensure integration into IT components through secure design and configuration.
• Perform vulnerability assessments to identify weaknesses and recommend countermeasures for mission assurance.
• Perform cybersecurity analysis as needed for compliance requirements on Windows and Linux systems, RDBMS, web servers, and virtualization.
• Administer and secure Windows environments, including AD, GPOs, and WSUS.
• Provide remediation recommendations and maintain knowledge of STIGs and SRGs with tools like Nessus and SCAP.
• Support RMF/ATO packages and mature the program's cybersecurity posture.
• Prepare security documentation including SSPs, SARs, and POA&Ms.

Skills

Security engineering

Vulnerability assessment

Windows/RHEL

Splunk

Trellix

Ansible

Nessus

eMASS

Tenable Security Center

Education

Bachelor's degree

Tools

Trellix

ACAS

Splunk

ePO

SCAP

Nessus

eMASS

Job description

Description

Join a team committed to a mission!

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Are you ready for your next career challenge?

The Defernse Sector at Leidos is seeking a cybersecurity engineer to collaborate with the Information System Security Engineer (ISSE) serving as a subject matter expert in advanced technical principles, theories, and concepts in Security Engineering, including operations, engineering, technical and program management support services, and RMF/ATO compliance to support cyber-related operations. Duties will include:

• Under the direction and guidance of the ISSM, capture and refine information security requirements and ensure their integration into information technology components and information systems through purposeful security design and configuration.
• Perform vulnerability assessments to determine weaknesses and exploit methods in systems/networks utilizing approved COTS and GOTS tools, in conjunction with security testing methodologies and frameworks to assess threats against information and system/networks and recommend appropriate countermeasures for continued mission assurance.
• Perform cybersecurity analysis, identification, and remediation of complex cybersecurity compliance requirements on IT systems and applications to include: Microsoft Windows and RHEL family of servers, workstations operating systems. RDBMS such as SQL and PostgreSQL, XML, and JSON-based semi-structured technologies. Web-Server and web application technologies (e.g., MS IIS, Apache/Tomcat, SharePoint). Virtualization technologies such as VMware and VDI infrastructures. Network infrastructure components such as switches, firewalls, vSANs, and thin client hardware.
• Responsible for administering and securing Windows environments, including WSUS, hardened Windows templates, Active Directory OUs and GPOs, and other Windows-based infrastructure and services.
• Provide remediation recommendations and mitigating strategies for vulnerabilities discovered and maintain in-depth knowledge of STIG/SRGs, technologies such as Tenable Nessus, SCAP compliance tools like EvaluateSTIG and other automated tools that assist with the assessment of security controls and the presentation of security assessment results.
• In coordination with change management processes, remediate, apply, and/or mitigate vulnerabilities to systems and system components through the application of security updates, patches, fixes, and/or secure configurations.
• Support the creation, development, and documentation of cybersecurity processes and procedures supporting Authorization to Operate (ATO) packages and, as needed, to mature the program's cybersecurity posture.
• Experience with eMASS to manage ATO package
• Prepare and maintain security documentation, including System Security Plans (SSPs), Security Assessment Reports, and Plans of Action and Milestones (POA&Ms).
• Install, configure and manage Trellix products.
• Create, tune, and enforce security policies through the ePO console to meet company security standards and compliance requirements.
• Troubleshoot Splunk issues between server and forwarder, create custom dashboards and implement best practices.
• Administer, configure, and maintain the Tenable Security Center.
• Review ACAS results and remediate appropriately.

Basic Qualifications

• Bachelor's degree in a related field and (5) five or more years of related actual work experience; additional work experience may be considered in lieu of a degree. (Unpaid experience will not be considered.)
• Active DoD Secret security clearance.
• Compliant with DoD 8140 requirements.
• DoD Risk Management Framework (RMF), especially in supporting Step 6.
• System/software design, enterprise architecture security, integration, testing, system administration, application administration, training, deployment, and O&M.
• Design, develop, and use host-based and network-based scanning tools.
• Security Content Automated Protocol (SCAP) based tools and specifications.
• Install, configure, test, deploy, and O&M of Enterprise-wide network-based cybersecurity tools (e.g., Trellix ESS, ACAS, Splunk, etc.) to support compliance testing and continuous monitoring.
• Supporting security engineering practices in the System/Software Development Life Cycle (SDLC) Process; General knowledge of the DoD and secure Information/LAN/WAN technologies.
• Hardening modern operating systems (OS) (i.e., RHEL, Microsoft Windows) and applications using Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and/or industry best practices and documenting results on requisite checklists.
• Compiling and providing metrics to program management as needed.
• Presenting technical information to non-technical stakeholders.

Preferred Qualifications

Experience in the following:

• Working experience with ansible
• Experience working in a DoD environment with the ability to adapt and rapidly meet changing deadlines and obligations.
• Project Management experience in an agile scrum environment.
• CASP+/SecurityX or CISSP certification

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.