Senior Product Security Engineer (Remote)

Leidos; Virginia (IL); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos SES seeks a Senior Product Security Engineer to secure a portfolio of shared software platforms across Ports & Borders and Aviation missions. You will embed with Enterprise Products engineering, translating requirements into practical security controls across architecture, CI/CD, and deployment.

The role involves threat modeling, security reviews, tooling automation, and collaboration with cybersecurity leadership, software, DevOps, infrastructure, and program stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related technical discipline with 8+ years of experience; or master's with 6+ years.
• Hands-on product/security engineering experience including DevSecOps integration and secure SDLC.
• Experience integrating security into SDLC activities across requirements, architecture, implementation, testing, build, deployment, and sustainment.
• Experience performing threat modeling, security reviews for applications/APIs, and secure design assessments.
• Experience implementing security tooling in CI/CD pipelines (SAST, SCA, secret scanning, container scanning, IaC analysis).
• Experience securing Linux-based systems, containers, and Kubernetes deployments.
• Experience analyzing vulnerabilities, providing remediation guidance, and communicating risk to stakeholders.
• Proficiency in Python, Bash, PowerShell, or similar scripting languages.
• Knowledge of OWASP risks and security baselines (NIST SP 800-53/171, CMMC, RMF, DISA STIGs, CIS).
• Ability to work independently across disciplines and communicate technical risk clearly.

Responsibilities

• Hands-on product security engineer for Enterprise products and teams.
• Translate policies and requirements into actionable security requirements and backlog items.
• Perform threat modeling, threat analysis, and security reviews of applications, APIs, and data flows.
• Design and improve automated security controls within CI/CD pipelines (SAST, SCA, secret scanning, container scanning, IaC analysis).
• Define secure configurations for Linux, Kubernetes, containers, databases, and identity services.
• Develop and validate hardened baselines using DISA STIGs, CIS Benchmarks, and customer requirements; automate where possible.
• Assess vulnerabilities, prioritize findings, and coordinate remediation actions.
• Support secure implementation of authentication, encryption, access control, secrets management, logging, and data protection controls.
• Develop reusable security tooling, scripts, and deployment patterns for Enterprise products.

Skills

Security engineering

Threat modeling

CI/CD security

SAST

SCA

Container security (Docker/Kubernetes)

Python/Bash/PowerShell scripting

Linux security

Communication skills

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Master's degree (preferred)

Tools

SAST tools

SCA tools

Container scanning tools

IaC security tooling

Kubernetes security tooling

Job description

Leidos SES seeks a Senior Product Security Engineer to secure a portfolio of shared software platforms across Ports & Borders and Aviation missions. You will embed with Enterprise Products engineering, translating requirements into practical security controls across architecture, CI/CD, and deployment.

The role involves threat modeling, security reviews, tooling automation, and collaboration with cybersecurity leadership, software, DevOps, infrastructure, and program stakeholders.