Senior Product Security Engineer (Remote)

Leidos Inc; United States; On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos SES seeks a Senior Product Security Engineer to support a portfolio of shared software platforms across Ports & Borders and Aviation missions. The role is a hands-on, individual contributor embedded with Enterprise Products engineering to translate security standards into practical controls.

You will develop reusable security tooling, integrate security in CI/CD, assess risk, and guide remediation with engineering teams while communicating tradeoffs to stakeholders.

Qualifications

• Bachelor's degree in cybersecurity or related field with 8+ years of experience.
• Hands-on product security, DevSecOps, platform security.
• Experience integrating security into SDLC and CI/CD pipelines.
• Threat modeling, API security reviews, secure design assessments.
• SAST, SCA, secret scanning, container scanning, IaC analysis.
• Security of Linux systems, containers, or Kubernetes environments.
• Vulnerability assessments, remediation guidance, risk communication.
• Automation scripting in Python, Bash, or PowerShell.
• Knowledge of NIST SP 800-53/171, CMMC, RMF, DISA STIGs, CIS Benchmarks.
• Ability to work independently and communicate risks clearly.

Responsibilities

• Hands-on product security engineer for Enterprise products and collaborate with multiple teams.
• Translate policies, requirements and threat information into actionable security requirements and backlog items.
• Perform threat modeling, attack-surface analysis, and security reviews of apps, APIs, and data flows.
• Design and improve automated security controls in CI/CD pipelines (SAST, SCA, secret detection, container scanning).
• Define secure configurations for Linux, Kubernetes, containers, databases, and network components.
• Develop hardened baselines per DISA STIGs, CIS Benchmarks, and customer needs; automate where possible.
• Assess vulnerabilities, prioritize findings, and coordinate remediation actions.
• Develop reusable security tooling, scripts, and templates for broader adoption.
• Create security engineering docs and evidence for NIST, CMMC, RMF, DHS, TSA, DISA, and customers.
• Perform security testing and communicate risks and tradeoffs to stakeholders.

Skills

Product security engineering

Threat modeling

CI/CD security

Python scripting

Security tooling

Linux security

Kubernetes security

Communication skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

SAST

SCA

Secret scanning

Container scanning

IaC analysis

DISA STIGs

Job description

Leidos SES seeks a Senior Product Security Engineer to support a portfolio of shared software platforms across Ports & Borders and Aviation missions. The role is a hands-on, individual contributor embedded with Enterprise Products engineering to translate security standards into practical controls.

You will develop reusable security tooling, integrate security in CI/CD, assess risk, and guide remediation with engineering teams while communicating tradeoffs to stakeholders.