Cybersecurity Engineer - Product Development Lead

Leidos; Huntsville (AL); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos in Huntsville, AL is seeking a Cybersecurity Engineer-Product Development to support defense systems from requirements through fielding. You will collaborate with Systems, DevSecOps, and Government cybersecurity stakeholders to implement RMF, perform risk assessments, and ensure secure integration of software and hardware.

The role demands knowledge of NIST SP 800-53, RMF, and DoD cybersecurity requirements, plus hands-on experience with vulnerability tooling like ACAS/Nessus.

Qualifications

• Experience with RMF processes and security control implementation.
• Ability to translate cybersecurity requirements for engineering and manufacturing teams.
• Knowledge of DoD cybersecurity requirements and RMF artifacts.
• Experience with vulnerability management and risk assessment.

Responsibilities

• Identify cybersecurity requirements derived from DoD policies, NIST, RMF controls.
• Assist Systems Engineering in establishing system security boundaries and data flows.
• Participate in system and software architecture design reviews.
• Evaluate architecture for cybersecurity weaknesses and recommend risk reductions.
• Provide cybersecurity guidance for authentication, encryption, logging, and secure communications.
• Coordinate vulnerability assessments using ACAS/Nessus and related tools.
• Develop remediation in coordination with engineering teams.
• Support RMF artifacts and authorization activities.

Skills

RMF

Vulnerability assessment

Secure coding

Cybersecurity requirements

System security boundaries

Education

Bachelor's degree in Cybersecurity or related field

Tools

ACAS/Nessus

SCAP/STIG

SAST/SCA

Job description

Description

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Your greatest work is ahead!

Leidos' Defense Senor Research and Analysis Division is seeking a Cybersecurity Engineer-Product Development to work in our Leidos office in Huntsville, AL. This is an exciting opportunity to use your experience to support development, integration, testing, production, delivery, and sustainment of complex defense systems and software products.

Primary Responsibilities

The ideal candidate will work closely with Systems Engineering, Software Engineering, Hardware Engineering, DevSecOps/IT, Software Assurance, Configuration Management, Test & Evaluation, Manufacturing, Program Management, and Government cybersecurity stakeholders. The Cybersecurity Engineer is responsible for helping shepherd the system from initial requirements and architecture through design, implementation, integration, cybersecurity assessment, RMF activities when applicable, qualification, production readiness, fielding, and sustainment.

• Identify applicable cybersecurity requirements derived from DoD policies, NIST publications, DFARS clauses, CMMC requirements, RMF controls, Security Technical Implementation Guides (STIGs), program protection requirements, Supply Chain Risk Management (SCRM), and customer-specific security requirements.
• Assist Systems Engineering in establishing system security boundaries, trust boundaries, information flows, external interfaces, and cybersecurity assumptions and constraints.
• Participate in system and software architecture development and design reviews.
• Evaluate system architecture for cybersecurity weaknesses and recommend practical risk-reduction measures.
• Provide cybersecurity engineering guidance for authentication, authorization, least privilege, encryption, key management, logging, auditing, secure communications, interface protection, network segmentation, and data protection.
• Perform or coordinate vulnerability assessments using tools such as ACAS/Nessus, SCAP/STIG assessment tools, SAST/SCA platforms, network analysis tools, and other approved cybersecurity assessment capabilities.
• Develop remediation recommendations in coordination with engineering teams.
• Support preparation and maintenance of RMF artifacts, including system diagrams, data-flow diagrams, hardware/software inventories, ports/protocols/services information, security assessment results, vulnerability records, and Plans of Action and Milestones (POA&Ms).
• Support IATT, ATO, Assess-Only, or other authorization/assessment approaches as applicable to the program.
• Ensure authorization documentation accurately represents the actual engineered and production system rather than treating RMF documentation as a separate compliance activity.

Basic Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Software Engineering, Systems Engineering, Electrical Engineering, Information Technology, or a related technical discipline with 8 years of cybersecurity engineering experience. In lieu of a degree a combination of education, military experience, and directly applicable engineering experience plus 11 years of may be considered.

Experience supporting cybersecurity for software-intensive or defense systems from development through test, production, and fielding is strongly preferred.

Strong understanding of secure system and software engineering principles.

Working knowledge of NIST SP 800-53, NIST SP 800-37 RMF, NIST SP 800-171, NIST SP 800-218 Secure Software Development Framework (SSDF), and applicable DoD cybersecurity requirements.

Understanding of DoD RMF processes and security control implementation.

Experience developing cybersecurity requirements and verification criteria.

Ability to translate cybersecurity requirements into language understandable to engineering, manufacturing, test, and program personnel.

Experience with cybersecurity risk assessment and vulnerability management.

Knowledge of secure software architecture and secure coding concepts.

Understanding of Linux security and system hardening.

Experience with vulnerability assessment technologies such as ACAS, Nessus, SCAP/STIG tools, or equivalent platforms.

Familiarity with SAST, DAST, SCA, dependency scanning, secrets scanning, and software supply-chain security.

Security+ or CISSP certification

Must be a US citizen and the ability to obtain and maintain an active secret clearance.

Must be a resident of Huntsville, AL or willing to relocate to the Huntsville, AL area.

Preferred Qualifications

• Strong communication and documentation skills
• Ability to work in a highly-technical, team-oriented environment that includes customers and co-workers
• Strong desire to learn and constantly improve

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Pay Range $107,900.00 - $195,050.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.