Cybersecurity Engineer – Product Development Lead

Leidos; Huntsville (AL); On-site; USD 108,000 - 195,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave

Retirement

Job summary

Leidos in Huntsville, AL is seeking a Cybersecurity Engineer-Product Development to support development, integration, testing, production, delivery, and sustainment of complex defense systems and software products.

You will work across systems engineering, software, DevSecOps, and cybersecurity stakeholders to shepherd the system from requirements to fielding while maintaining RMF controls and security best practices.

Qualifications

• Bachelor's degree and 8 years cybersecurity engineering experience.
• Experience securing software-intensive or defense systems through development, test, production, and fielding.
• Strong knowledge of secure system and software engineering principles and RMF/NIST requirements.

Responsibilities

• Identify cybersecurity requirements from DoD, NIST, RMF, CMMC, and SCRM.
• Establish system security boundaries and information flows with engineering teams.
• Participate in system and software architecture reviews.
• Evaluate architecture for cybersecurity weaknesses and recommend mitigations.
• Provide guidance on authentication, authorization, encryption, logging, and secure communications.
• Perform vulnerability assessments using ACAS/Nessus and related tools.
• Develop remediation recommendations with engineering teams.
• Support RMF artifacts and authorization processes.
• Ensure RMF documentation reflects the actual production system.

Skills

Cybersecurity engineering

RMF & NIST compliance

Vulnerability assessment

ACAS/Nessus

SAST/DAST/SDLC security

Security+ or CISSP

Linux security

US citizenship

Relocation to Huntsville

Education

Bachelor’s degree in Cybersecurity, CS, CE, SE

Tools

ACAS

Nessus

SCAP/STIG

SAST

DAST

SCA

Dependency scanning

Secrets scanning

Job description

Description

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Leidos’ Defense Senor Research and Analysis Division is seeking a Cybersecurity Engineer-Product Development to work in our Leidos office in Huntsville, AL. This is an exciting opportunity to use your experience to support development, integration, testing, production, delivery, and sustainment of complex defense systems and software products.

.

Primary Responsibilities

The ideal candidate will work closely with Systems Engineering, Software Engineering, Hardware Engineering, DevSecOps/IT, Software Assurance, Configuration Management, Test & Evaluation, Manufacturing, Program Management, and Government cybersecurity stakeholders. The Cybersecurity Engineer is responsible for helping shepherd the system from initial requirements and architecture through design, implementation, integration, cybersecurity assessment, RMF activities when applicable, qualification, production readiness, fielding, and sustainment.

• Identify applicable cybersecurity requirements derived from DoD policies, NIST publications, DFARS clauses, CMMC requirements, RMF controls, Security Technical Implementation Guides (STIGs), program protection requirements, Supply Chain Risk Management (SCRM), and customer-specific security requirements.
• Assist Systems Engineering in establishing system security boundaries, trust boundaries, information flows, external interfaces, and cybersecurity assumptions and constraints.
• Participate in system and software architecture development and design reviews.
• Evaluate system architecture for cybersecurity weaknesses and recommend practical risk-reduction measures.
• Provide cybersecurity engineering guidance for authentication, authorization, least privilege, encryption, key management, logging, auditing, secure communications, interface protection, network segmentation, and data protection.
• Perform or coordinate vulnerability assessments using tools such as ACAS/Nessus, SCAP/STIG assessment tools, SAST/SCA platforms, network analysis tools, and other approved cybersecurity assessment capabilities.
• Develop remediation recommendations in coordination with engineering teams.
• Support preparation and maintenance of RMF artifacts, including system diagrams, data-flow diagrams, hardware/software inventories, ports/protocols/services information, security assessment results, vulnerability records, and Plans of Action and Milestones (POA&Ms).
• Support IATT, ATO, Assess-Only, or other authorization/assessment approaches as applicable to the program.
• Ensure authorization documentation accurately represents the actual engineered and production system rather than treating RMF documentation as a separate compliance activity.

Basic Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Software Engineering, Systems Engineering, Electrical Engineering, Information Technology, or a related technical discipline with 8 years of cybersecurity engineering experience. In lieu of a degree a combination of education, military experience, and directly applicable engineering experience plus 11 years of may be considered.
• Experience supporting cybersecurity for software-intensive or defense systems from development through test, production, and fielding is strongly preferred.
• Strong understanding of secure system and software engineering principles.
• Working knowledge of NIST SP 800-53, NIST SP 800-37 RMF, NIST SP 800-171, NIST SP 800-218 Secure Software Development Framework (SSDF), and applicable DoD cybersecurity requirements.
• Understanding of DoD RMF processes and security control implementation.
• Experience developing cybersecurity requirements and verification criteria.
• Ability to translate cybersecurity requirements into language understandable to engineering, manufacturing, test, and program personnel.
• Experience with cybersecurity risk assessment and vulnerability management.
• Knowledge of secure software architecture and secure coding concepts.
• Understanding of Linux security and system hardening.
• Experience with vulnerability assessment technologies such as ACAS, Nessus, SCAP/STIG tools, or equivalent platforms.
• Familiarity with SAST, DAST, SCA, dependency scanning, secrets scanning, and software supply‑chain security.
• Security+ or CISSP certification
• Must be a US citizen and the ability to obtain and maintain an active secret clearance.
• Must be a resident of Huntsville, AL or willing to relocate to the Huntsville, AL area.

Preferred Qualifications

• Strong communication and documentation skills
• Ability to work in a highly-technical, team-oriented environment that includes customers and co-workers
• Strong desire to learn and constantly improve

At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Pay Range

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

• competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave
• Retirement

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.