Remote Cybersecurity Engineer for TOMCAT Security & RMF

Koitecc Solutions; Northern (KY); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Cybersecurity Engineer to provide engineering and operational cybersecurity support across the TOMCAT environment, integrating security requirements into enterprise IT operations, incident response, vulnerability management, system changes, patching, and service delivery.

The role works closely with TSA SOC, Information Assurance leadership, system owners, infrastructure engineers, ServiceNow teams, and operational service teams to identify, analyze, remediate, and track

Qualifications

• Bachelor's degree plus 8+ years in cybersecurity in enterprise or federal environment; additional years may substitute for degree.
• Knowledge of NIST cybersecurity principles and federal cybersecurity requirements.
• Experience with vulnerability management, remediation, POA&M, RMF, and security reporting.
• Knowledge of cybersecurity incident response processes.
• Experience working with enterprise security, endpoint, network, cloud, or infrastructure technologies.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to coordinate cybersecurity actions with technical operations without disrupting mission systems.
• Ability to obtain TSA Suitability and Public Trust Security Clearance.

Responsibilities

• Provide cybersecurity engineering and operational support for TOMCAT enterprise services.
• Support vulnerability management, security remediation, POA&M activities, RMF processes, and cybersecurity compliance reporting.
• Analyze vulnerability findings, security risks, remediation status, exceptions, and trends.
• Coordinate cybersecurity remediation activities with system owners, patch teams, and operations leads.
• Support detection, analysis, and response to cybersecurity incidents.
• Coordinate with TSA SOC, ISSOs, CIC, and technical service towers during cyber-related incidents.
• Analyze security alerts, indicators, affected assets, containment actions, and remediation status.
• Support security configuration, patching, hardening, monitoring, and technical-control activities.
• Maintain audit evidence, cybersecurity reporting artifacts, corrective-action records, and technical documentation.
• Support FISMA, NIST, TSA/DHS security requirements, and operational compliance activities.
• Integrate cybersecurity considerations into incident, change, release, configuration, and operational processes.
• Support security assessments and technical reviews of proposed changes and new technologies.
• Participate in root-cause analysis and lessons-learned activities following cybersecurity events.
• Maintain cybersecurity SOPs, runbooks, technical procedures, and knowledge articles.
• Provide technical recommendations to improve the security and resilience of enterprise services.

Skills

NIST principles

Incident response

Vulnerability management

Documentation

Communication

Coordination

Education

Bachelor's degree in a related field

Tools

SIEM

EDR

ServiceNow

RMF tooling

Job description

Leidos is seeking a Cybersecurity Engineer to provide engineering and operational cybersecurity support across the TOMCAT environment, integrating security requirements into enterprise IT operations, incident response, vulnerability management, system changes, patching, and service delivery.

The role works closely with TSA SOC, Information Assurance leadership, system owners, infrastructure engineers, ServiceNow teams, and operational service teams to identify, analyze, remediate, and track