Staff Cyber Security Engineer

Leidos; United States; Remote; USD 108,000 - 195,000; Full time

Benefits offered by this job

Paid Time Off

11 paid Holidays

401K with 6% match

Job summary

Leidos is seeking a TS/SCI cleared Cyber Security Engineer to support a long-term DIA-NDOC DOMEX Technology Platform contract. You will work with Systems, Software, and Architecture teams to secure cloud-based OSINT workflows and automate security controls within CI/CD pipelines.

On-site in Bethesda, MD with flexible scheduling and possible remote tasks. The role requires deep knowledge of RMF, STIGs, Kubernetes security, and DoD 8570-compliant certifications.

Qualifications

• Active TS/SCI with polygraph.
• Bachelor's degree in Cybersecurity, CS, or related field with 8–12 years of experience or Master’s with 6–10 years.
• At least one DoD 8570.01-M IAT and one IAT Level II or higher certification (e.g., CISSP, CCNA Security, CySA+, Security+ CE) with ability to obtain PUA/elevated access and Linux+.
• 5+ years of experience hardening Linux hosts and applying DISA STIG.
• Experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers.
• Experience developing A&A packages to obtain and maintain ATO in secure environments.
• Grounded knowledge in NIST SP 800-37, SP 800-53, CNSSI 1253.
• XACTA/eMass experience with ACAS, STIG automation.
• Experience with Bash, Python scripting.
• Understanding of secure SDLC and encryption.
• Understanding of microservices architecture and service mesh.

Responsibilities

• Collect, review, and provide feedback on cybersecurity, architecture, and engineering artifacts.
• Assess BOE results to support RMF processes.
• Conduct periodic vulnerability assessments for cloud systems.
• Implement and manage security controls for containerized apps and cloud infra.
• Collaborate with DevSecOps to ensure secure coding practices.
• Ensure security measures are integrated into CI/CD and tooling.
• Develop scripts for STIG validation and automation.
• Maintain continuous monitoring for cloud architectures.

Skills

Security engineering

Cloud security

Kubernetes security

DevSecOps

Scripting Bash/Python

RMF/DoD compliance

Education

Bachelor's degree in Cybersecurity/CS

Master's degree in Cybersecurity

Tools

Kubernetes

Nessus

Fortify

Checkmarx

SonarQube

ACAS

STIG

Job description

Description

Are you ready to join Leidos all-star team? Through training, teamwork, and exposure to challenging technical work, let Leidos show how to accelerate your career path.

Leidos has an exciting opening for you as our next TS/SCI cleared Cyber Security Engineer supporting a long-term DIA-NDOC DOMEX Technology Platform (DTP) contract. You will work closely with Systems Engineers, Software Engineers, Architects, and Operations Engineering/Manager on a broad scope of activities to support our client's mission to centralize and standardize Tasking, Collection, Processing, Exploitation and Dissemination (TCPED) of Open Source Intelligence (OSINT) across the Defense and Intelligence Community enterprises. We leverage cloud-based computing, artificial intelligence (Al), machine learning (ML), and cross-domain transfer systems to provide cutting edge data exploitation, enrichment, triage, and analytics capabilities to the Defense Intelligence Enterprise.

While most work is conducted on-site at our client location in Bethesda, MD, we offer a flexible schedule and, occasionally, some tasks may be performed remotely. The percentage of remote work will vary based on client requirements/deliverables.

Candidates must have a demonstrated ability to work in a dynamic and challenging environment and possess a solid understanding of the software development life cycle all while working within an Agile framework.

Through training, teamwork, and exposure to challenging technical work, let Leidos show how to accelerate your career path. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in Analysis Solutions Business Area!

Primary Responsibilities

You will work closely with the team on the following key tasks

• Collect, review, assess, and provide feedback on system cybersecurity, architecture, and engineering artifacts
• Collect, review, assess, and provide feedback on system cybersecurity Body-of-Evidence (BOE) results required to support DoD & IC RMF cybersecurity authorization processes
• Conduct periodic compliance scanning, vulnerability assessments, and risk analysis for cloud-based systems
• Implement and manage security controls for containerized applications and the underlying cloud-based infrastructure
• Collaborate with DevSecOps, infrastructure, and software development teams to ensure secure coding and engineering practices
• Ensure integration of security measures into software development processes, CI/CD pipelines, and engineering tools
• Develop, maintain, and execute shell commands, scripts, and automation code for STIG compliance and validation
• Implement and manage continuous monitoring solutions of cloud-based architectures
• Support Government cybersecurity officials & program personnel in preparing cybersecurity packages, including Interim Authority to Test (IATT) packages, Authority to Operate (ATO) packages, and Change Requests (CRs)
• Stay current with emerging cloud security threats, technologies, and best practices

Basic Qualifications

• Clearance: Active or current Top Secret with SCI eligibility and the ability to obtain Polygraph
• Education & Experience: Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or related technical discipline and 8-12 years of relevant experience OR Master's degree with 6-10 years of relevant experience. Additional years of experience may be considered in lieu of a degree. ISSO experience must be supplemented with demonstrated technical expertise.
• Certification: At least one DoD 8570.01-M IAT and one IAT Level II or higher certification e.g., CCNA Security, CySA+, Security+ CE, CISSP (or Associate) and the ability to obtain Privileged User Account (PUA)/elevated access per DoD 8570 policy, and Linux+ certification
• At least 5 years of experience hardening Linux hosts and applying DISA STIG
• Demonstrated experience securing Kubernetes platforms (secrets management, RBAC, etc.) and integrating security into CI/CD pipelines and containers
• Demonstrated experience developing A&A packages to obtain and maintain ATO in secure environments.
• Grounded knowledge in NIST SP 800-37, SP 800-53, CNSSI 1253
• XACTA/eMass experience, performing vulnerability compliance with ACAS, STIG automation
• Experience with scripting languages (Bash, Python)
• Understanding of secure software development practices and code reviews
• Experience with encryption and transport
• Understanding of microservices architecture and service mesh.

Preferred Qualifications

• Active TS/SCI with polygraph
• Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS
• Experience supporting the Intelligence Community in RMF activities with ICD 503 and related compliance directives, policies, procedures
• Experience with the Zero Trust pillars and applying Zero Trust framework to secure systems
• DAST & SAST tools for on-prem (Fortify, Checkmarx, SonarQube), configuring Nessus, Splunk
• Multiple IAT/IAM II or III advanced certifications such as, CISSP-ISSAP/ISSEP, CISM, CCSP, Security X/CASP+
• Cloud certifications such as AWS Solutions Architect, AWS Security Specialty, Kubernetes and Cloud Native Associate (KCNA), Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS)
• Linux certifications such as: Red Hat Certified System Administrator - Enterprise Linux (RHCSA), Red Hat Certified Engineer - Enterprise Linux (RHCE), Red Hat Certified Architect - Enterprise Linux (RHCA)
• Prior Linux sys admin experience
• Oracle Linux 8 System Administrator certification
• Experience applying security controls to various AI implementations
• Experience with ICD 503 compliance
• Experience applying security controls to Generative AI implementations
• Prior network engineering experience

Original Posting

September 30, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.