Cyber Security Engineer

Description

Leidos has an exciting opportunity for a Cyber Security Engineer supporting cyber platform architecture, engineering and operations, including SIEM platform management, scanning platform, and end-point protection and monitoring architecture. The Cyber Security Engineer will perform systems analysis, modify and update systems, deploy and maintain applications, update and maintain system documentation, perform testing and communicate updates to stakeholders as required. This position will also be responsible for collaborating with stakeholders to design, build and deploy new systems as requirements change.

This position supports a hybrid schedule, usually 3 days/week on-site + 2 days/week remote, as customer needs permit.

Clearance Requirement:
Applicants must currently possess a DoD Secret security clearance with the ability to obtain and maintain a TS/SCI.

Key Responsibilities:

• Establish and maintain configuration and technical support to a unique community of users, assist in the technical design process, and provide guidance/direction to customer on how to best get value from the cyber platforms.
• Maintain, upgrade and troubleshoot the cyber platforms
• Install, upgrade and maintain required cyber securityapplications and add-ons.
• Provide performance and license tuning for systems and troubleshoot components across multiple network environments.
• Provide solution engineering support to ensure systems and components meet current and future standards.
• Develop, create, deploy, and manage custom monitors, alerts and dashboards.
• Monitor the cyber platforms for health status, and other issues, and resolve as needed.
• Follow approved DoD, STIG standards and DoD IAVA requirements.
• Manage patching and updates of the cyber platforms.
• Monitor and audit configurations and participate in the Change Management process to ensure that unauthorized changes do not occur.
• Build and integrate contextual data into notable events.
• Develop advanced scripts for the manipulation of data to support analyst requirements.
• Provide recommendations and implement changes to optimize the effectiveness of the cyber security platforms
• Perform integration activities to connect with 3rd party software APIs.
• Recommend innovative solutions to management and key stakeholders

• Bachelor's degree and 8+ years of relevant experience; additional years of experience may be substituted in lieu of a degree.
• At least five (5) years of experience with SIEM, scanning, and/or end-point protection platforms
• Must have or obtain 8570 IAT-II certification prior to start date.
• Experience developing in Bash, Perl, Shell, PowerShell, SQL, D3, HTML, XML, CSS, Bash, JAVA and/or Python scripts.
• 5+ years hands-on experience implementing and administering security solutions, including developing related documentation and artifacts.
• Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps.
• Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology.
• Experience managing Windows and/or Linux server platforms
• Excellent knowledge and experience with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and related applications.
• Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes.
• Experience in implementing and managing STIG settings and requirements
• Understanding of federal cybersecurity guidance such as FISMA NIST SP 800-37 - Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach and NIST 800-137 - Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations.

• CISSP certification
• CASP certification
• Additional certifications demonstrating cybersecurity/technical mastery.