{"id":3231659,"url":"https://alion.io/job/leidos-cyber-security-subject-matter-expert","title":"Cyber Security Subject Matter Expert","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":260,"ghost_share":0.004,"stale_share":0.881,"repost_share":0.004,"time_to_fill_p50_days":28,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":131300,"max":237350,"currency":"USD","period":"year","gross":null,"usd_annual":237350},"salary_estimate":null,"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Databricks","optional":false},{"name":"Delta Lake","optional":false},{"name":"Linux","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Power BI","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true},{"name":"Splunk","optional":true},{"name":"SQL","optional":true},{"name":"Tines","optional":true}],"status":"live","first_seen_at":"2026-10-06T00:00:00Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-27T19:08:31Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Looking for an opportunity to make an impact? Join the Leidos Digital Modernization (DigiMod) team in accelerating information technology in a changing world where we make a difference by modernizing critical networks for our government and commercial customers.\nAt Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.\nAre you ready to challenge yourself with an organization that encourages & supports career growth on an enterprise-wide scale? Your greatest work is ahead!\nWe are seeking a highly organized, detail-oriented Cyber Security Subject Matter Expert to join the Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) Program Management Office (PMO) Team. This role provides senior-level cybersecurity architecture and technical expertise to support the design, security, and ongoing operation of complex hybrid cloud and enterprise infrastructure environments. The ideal candidate brings extensive experience in cybersecurity, systems architecture, cloud technologies, enterprise networking, and infrastructure operations, with the ability to assess technical requirements, identify security risks, and develop practical recommendations that support mission and enterprise objectives.\nThe successful candidate will work closely with senior technical leaders, government stakeholders, and cross-functional teams to evaluate current and future technology needs, strengthen cybersecurity posture, and advance secure, resilient, and scalable solutions across the environment. Strong communication, technical problem-solving, and independent decision-making skills are essential, as is the ability to translate complex technical concepts into clear recommendations, documentation, and actionable solutions.\nPrimary Responsibilities:\nReview and evaluate system design documents, engineering configurations, and solution architectures developed by CDM integrators; provide technical analysis and recommendations based on cybersecurity requirements, emerging technologies, future needs, and industry trends.\nReview and provide input to system requirements based on cybersecurity posture.\nCompile industry best practices and lessons learned into future iterations and new designs.\nProvide broad-based experience in IT Service Management and apply the experience to specific cyber security initiatives relating to system design, development, and operations and maintenance.\nWork with the Senior Security Architect to ensure current and planned systems support the overall enterprise architecture strategy and technical reference model.\nEvaluate deployed infrastructure for security, availability, reliability, and performance and recommend improvements.\nProvide technical analysis and engineering support for the deployment, configuration, and integration of cybersecurity data collection services and tools.\nEvaluate O&M activities and system performance and provide recommendations to improve security, reliability, and operations.\nCollaborate, Coordinate, and build relationships with customer representatives and external stakeholders.\nManage multiple assignments, changing priorities, and work independently with little oversight.\nSupport processes to evaluate and improve all operating systems, hardware support, software, firmware solutions and provide advisement concerning future purchase of the same.\nWork with relevant stakeholders to analyze technical issues at the network, system, and application levels and recommend solutions.\nReview and evaluate cybersecurity data flows, interfaces, data models, integration approaches, data quality, and normalization across CDM tools and enterprise data platforms; identify gaps and provide technical recommendations.\nDraft technical documentation, reports, and presentations as needed for customer or internal use.\nPerform analysis of security posture by reviewing vulnerability and compliance scans and making recommendations for remediations.\nSupport operations across multiple geographic locations.\nSupport mentoring and cross-team knowledge sharing.\nReviews documentation and diagrams created by team members (e.g., system specifications).\nWrites documentation, including technical standards and processes\nBasic Qualifications:\nMust be a U.S. Citizen.\nMust have a Secret Clearance.\nMaster’s degree with 15+ years of relevant professional experience; OR a PhD degree with 13+ years of relevant experience.\n5+ years of experience directly supporting and interfacing with government customers\nExperience with Azure and AWS services and components to build, manage, and maintain cloud environments\nCloud skills - Understanding of cloud terminology, architecture, and tools to include installing, provisioning, and monitoring\nExperience installing, configuring, securing, and troubleshooting Linux Operating Systems\nExperience deploying, configuring, and drawing security insights from tools such as Qualys, Wraithwatch, and Databricks in a hybrid cloud/on-prem environment.\nUtilize Databricks Delta Lake pipelines (Bronze, Silver, Gold tables) to clean, structure CDM data for precise mission reporting.\nUnderstand AI/ML models in Databricks to identify security gaps, automating threat detection across DHS networks.\nAnalyze Qualys data fields, metadata, scan values to map security telemetry accurately into CDM data models.\nIdentify gaps in Qualys data outputs to help team members understand asset details, improving overall reporting.\nExperience managing enterprise networks\nCandidate must, at a minimum, possess a current DoD 8570/8140-recognized certification applicable to the position's assigned DCWF work role and proficiency level. Examples include CCNP Enterprise, CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, GDSA, GICSP, CCSP, CSSLP, GCSA, GSEC, SecurityX (formerly CASP+), or other applicable DoD 8140-approved certifications.\nPersonnel supporting the Department of Homeland Security are required to obtain an Entry on Duty (EOD) clearance to support this program\nPreferred Qualifications:\nFamiliarity with cybersecurity programs or federal IT environments.\nExperience with tools such as Tenable, Regscale, Tines, and Axonius.\nExperience with scripting and automation using languages such as Python and PowerShell.\nExperience creating reports and dashboards with data visualization tools such as PowerBI.\nExperience working with SIEM tools such as Splunk to ingest, normalize, store, and maintain data from endpoint, network, and application source types.\nProficiency with SQL and experience querying cybersecurity data from various database platforms (e.g., SIEM, data lakes, relational databases).\nExperience with data modeling and mapping system data flows for the purpose of cybersecurity analysis.\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nOctober 6, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $131,300.00 - $237,350.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":8115,"description_truncated":false,"requirements":{"experience_years_min":15,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","National Security","C4ISR","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-25T08:40:11Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.567,"p_room":0.75,"age_days":21,"expected_fill_days":28,"reasons":["conf:0","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":237350,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-cyber-security-subject-matter-expert","json_url":"https://alion.io/job/leidos-cyber-security-subject-matter-expert.json","meta":{"generated_at":"2026-10-27T21:38:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13103,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-cyber-security-subject-matter-expert"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-cyber-security-subject-matter-expert"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-cyber-security-subject-matter-expert"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-cyber-security-subject-matter-expert\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-cyber-security-subject-matter-expert"}]}