Defense Cyber Countermeasures Engineer

Leidos Inc; Shiloh (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a Countermeasures Engineer to defend DoD networks under the GSM-O II program, delivering innovative countermeasures and automated security tooling. You will design detection capabilities, analyze threats, and deploy scalable solutions across DoD and classified environments.

This role requires DoD Top-Secret clearance and strong coding skills. The position emphasizes DevSecOps practices, collaboration with DISA and mission partners, and adapting to evolving cyber threats with

Qualifications

• Active DoD Top-Secret clearance.
• 8+ years hands-on experience or equivalent combination of education and experience.
• DoD 8570 IAT Level II certification (Security+ CE or equivalent) and CSSP-A certification within 180 days.
• Strong programming proficiency in Python, Java, Ruby, or C++.
• Proven experience developing custom malware detection capabilities.

Responsibilities

• Design and deploy innovative countermeasures to neutralize threats and expose adversary activities on Classified terrain.
• Develop cutting-edge malware detection capabilities tailored to emerging threat actor techniques.
• Continuously evaluate countermeasure effectiveness against evolving APTs and adjust strategies in real time.
• Apply Detection-as-a-Code principles to create scalable, version-controlled security solutions.

Skills

DoD Top-Secret

IAT Level II

Malware detection

Python

Java

Ruby

C++

Education

Bachelor's degree in CS/Cybersecurity/Comp Eng

Tools

Git

Sigma

Yara

Snort

Suricata

Reverse engineering tools

Job description

Leidos is seeking a Countermeasures Engineer to defend DoD networks under the GSM-O II program, delivering innovative countermeasures and automated security tooling. You will design detection capabilities, analyze threats, and deploy scalable solutions across DoD and classified environments.

This role requires DoD Top-Secret clearance and strong coding skills. The position emphasizes DevSecOps practices, collaboration with DISA and mission partners, and adapting to evolving cyber threats with