Cyber Security Engineer (SME)

About the role

Leidos has a new and exciting opportunity for a Cybersecurity Engineer SME in our Intel Sector's (IS) Analysis Solutions Business Area (ASBA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. Join us and make a difference in National Security!

Responsibilities

• Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while identifying opportunities to automate repeatable operations tasks.
• Design, configure, implement, troubleshoot, and maintain security technologies such as firewalls (security groups), endpoint protection tools (HBSS/Trellix, Carbon Black EDR), SIEM platforms (Splunk).
• Monitor system and network security using Security Information and Event Management (SIEM) tools such as Splunk Enterprise Security to detect, analyze, and respond to potential threats or anomalous activity.
• Support the investigation and remediation of cybersecurity incidents, including system or network breaches and malware infections.
• Participate in change management processes to ensure system changes maintain security compliance and do not introduce new vulnerabilities.
• Audit systems and configurations to ensure compliance with established cybersecurity policies, standards, and secure configuration baselines.
• Collaborate with engineering, development, and operations teams to integrate security controls into DevSecOps pipelines and system architectures.
• Continuously monitor security advisories, bulletins, and industry threat intelligence to stay informed of current vulnerabilities, threats, and trends.
• Assist with the implementation and enforcement of secure system configurations and cybersecurity compliance requirements.
• Support vulnerability management activities by reviewing scan results, assessing risk, and coordinating remediation efforts with system owners and technical teams.

Requirements

• MS degree and 15 or more years of prior relevant experience (additional years of experience may be substituted in lieu of a degree).
• Must have an active TS/SCI with a Polygraph.
• Experience implementing and managing Security Information and Event Management (SIEM) tools such as Splunk or similar platforms.
• Experience working with endpoint and network security technologies, including IDS/IPS, HBSS/Trellix or Carbon Black EDR, and related defensive security tools.