{"id":170675,"url":"https://alion.io/job/leidos-cyber-security-engineer-journeyman","title":"Cyber Security Engineer Journeyman","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":273,"ghost_share":0.004,"stale_share":0.872,"repost_share":0.004,"time_to_fill_p50_days":28,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":87100,"max":157450,"currency":"USD","period":"year","gross":null,"usd_annual":157450},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true},{"name":"Bash","optional":true},{"name":"C#","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-07-15T00:00:00Z","employer_posted_date":"2026-07-15","last_verified_at":"2026-10-28T18:23:02Z","board_verified":true,"closed_at":null,"days_open":105,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":105},"description":"Leidos Digital is seeking a Journeyman Cyber Security Engineer (Microsoft) to support the U.S. Special Operations Command (USSOCOM) Enterprise Development, Application and Training (EDAT) Zero Trust initiative. This position provides engineering and operational support for Microsoft's enterprise security platform, helping implement and maintain Zero Trust security capabilities across identity, endpoint, data, and security operations.\nThe Journeyman Cyber Security Engineer will support the integration of Microsoft security technologies-including Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and Behavior Analytics-to strengthen the Department of Defense (DoD) Visibility and Analytics pillar while enabling security automation and orchestration. Working alongside senior engineers and cybersecurity professionals, this role supports engineering, operational, and RMF activities that improve the organization's security posture.\nThis Journeyman role is intended for cybersecurity engineers with solid experience supporting Microsoft security technologies who can independently execute engineering and operational tasks while working under the technical leadership of senior engineers in support of USSOCOM's Zero Trust implementation.\nActive Top Secret clearance with SCI eligibility (TS/SCI) is REQUIRED to be considered for this opportunity.\nKey Responsibilities\nSupport the implementation, configuration, and maintenance of Microsoft security technologies within the Zero Trust architecture.\n\nAssist with deployment and administration of Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and related Microsoft security services.\n\nConfigure and tune analytics rules, workbooks, dashboards, alerts, and automation workflows to improve threat detection and response.\n\nSupport User and Entity Behavior Analytics (UEBA) and Security Orchestration, Automation, and Response (SOAR) capabilities using Microsoft security platforms.\n\nAssist with integrating security telemetry from Microsoft and third-party enterprise systems.\n\nCollaborate with ISSOs, cybersecurity engineers, system administrators, and government stakeholders supporting the Zero Trust initiative.\n\nSupport RMF activities, including documentation updates, implementation of security controls, and maintenance of Authorization to Operate (ATO) artifacts.\n\nAssist with vulnerability assessments, system hardening, and implementation of DISA Security Technical Implementation Guides (STIGs).\n\nTroubleshoot Microsoft security platform issues and assist with resolving operational challenges.\n\nParticipate in cybersecurity investigations, incident response, and security monitoring activities.\n\nDocument engineering procedures, technical configurations, and operational processes.\n\nRecommend improvements to security monitoring, automation, and enterprise cybersecurity processes.\n\nSupport continuous improvement initiatives while following cybersecurity best practices.\n\nRequired Qualifications\nActive Top Secret clearance with SCI eligibility (TS/SCI).\n\nBachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field; and 4 - 8 years of relevant experience may be substituted for a degree.\n\nThree or more (3+) years of experience supporting enterprise cybersecurity, Microsoft security platforms, or systems engineering.\n\nExperience administering or supporting Microsoft enterprise security solutions.\n\nExperience with one or more of the following:\nMicrosoft Sentinel\n\nMicrosoft Defender XDR\n\nMicrosoft Purview\n\nMicrosoft Entra ID\n\nMicrosoft Logic Apps\n\nMicrosoft Behavior Analytics\n\nExperience supporting SIEM, SOAR, UEBA, or security monitoring operations.\n\nWorking knowledge of Windows and Linux operating systems.\n\nFamiliarity with enterprise identity, endpoint, cloud, and security architectures.\n\nExperience supporting RMF documentation or cybersecurity compliance activities.\n\nKnowledge of DISA STIG implementation and cybersecurity best practices.\n\nDoD 8140 / 8570 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent) with the ability to obtain IAT Level III within an approved timeframe if required.\n\nPreferred Qualifications\nMicrosoft certifications such as:\nSC-100: Microsoft Cybersecurity Architect\n\nSC-200: Microsoft Security Operations Analyst\n\nSC-300: Microsoft Identity and Access Administrator\n\nAZ-500: Microsoft Azure Security Engineer Associate\n\nExperience with scripting or automation using PowerShell, Python, Bash, or C#.\n\nExperience integrating Microsoft security products with third-party security tools.\n\nFamiliarity with MITRE ATT&CK and threat detection engineering.\n\nFamiliarity with Department of Defense and NSA Zero Trust guidance.\n\nExperience supporting the DoD RMF process and Authorization to Operate (ATO) lifecycle.\n\nFamiliarity with USSOCOM SOFNET or other DoD enterprise environments\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nJuly 15, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\n Pay Range:\nPay Range $87,100.00 - $157,450.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":6017,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","National Security","C4ISR","Information Security"],"lifecycle":[{"event":"open","at":"2026-08-29T23:33:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.263,"p_room":0.28,"age_days":105,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":157450,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-cyber-security-engineer-journeyman","json_url":"https://alion.io/job/leidos-cyber-security-engineer-journeyman.json","meta":{"generated_at":"2026-10-28T20:10:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27936,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-cyber-security-engineer-journeyman"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-cyber-security-engineer-journeyman"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-cyber-security-engineer-journeyman"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-cyber-security-engineer-journeyman\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-cyber-security-engineer-journeyman"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":170675}},{"tool":"search_jobs","arguments":{"company":"leidos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":170675},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}