Cybersecurity Engineer – Product Development Lead

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Your greatest work is ahead!

Leidos’ Defense Senor Research and Analysis Division is seeking a Cybersecurity Engineer-Product Development towork in our Leidos office in Huntsville, AL. This is an exciting opportunity to use your experience to support development, integration, testing, production, delivery, and sustainment of complex defense systems and software products.

.

Are you ready to make an impact? Share your resume with us today!

Primary Responsibilities

The ideal candidate will work closely with Systems Engineering, Software Engineering, Hardware Engineering, DevSecOps/IT, Software Assurance, Configuration Management, Test & Evaluation, Manufacturing, Program Management, and Government cybersecurity stakeholders. The Cybersecurity Engineer is responsible for helping shepherd the system from initial requirements and architecture through design, implementation, integration, cybersecurity assessment, RMF activities when applicable, qualification, production readiness, fielding, and sustainment.

· Identify applicable cybersecurity requirements derived from DoD policies, NIST publications, DFARS clauses, CMMC requirements, RMF controls, Security Technical Implementation Guides (STIGs), program protection requirements, Supply Chain Risk Management (SCRM), and customer-specific security requirements.

· Assist Systems Engineering in establishing system security boundaries, trust boundaries, information flows, external interfaces, and cybersecurity assumptions and constraints.

· Participate in system and software architecture development and design reviews.

· Evaluate system architecture for cybersecurity weaknesses and recommend practical risk-reduction measures.

· Provide cybersecurity engineering guidance for authentication, authorization, least privilege, encryption, key management, logging, auditing, secure communications, interface protection, network segmentation, and data protection.

· Perform or coordinate vulnerability assessments using tools such as ACAS/Nessus, SCAP/STIG assessment tools, SAST/SCA platforms, network analysis tools, and other approved cybersecurity assessment capabilities.

· Develop remediation recommendations in coordination with engineering teams.

· Support preparation and maintenance of RMF artifacts, including system diagrams, data-flow diagrams, hardware/software inventories, ports/protocols/services information, security assessment results, vulnerability records, and Plans of Action and Milestones (POA&Ms).

· Support IATT, ATO, Assess-Only, or other authorization/assessment approaches as applicable to the program.

· Ensure authorization documentation accurately represents the actual engineered and production system rather than treating RMF documentation as a separate compliance activity.

Basic Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Software Engineering, Systems Engineering, Electrical Engineering, Information Technology, or a related technical discipline with 8 years of cybersecurity engineering experience. In lieu of a degree a combination of education, military experience, and directly applicable engineering experience plus 11 years of may be considered.

Experience supporting cybersecurity for software-intensive or defense systems from development through test, production, and fielding is strongly preferred.

· Strong understanding of secure system and software engineering principles.

· Working knowledge of NIST SP 800-53, NIST SP 800-37 RMF, NIST SP 800-171, NIST SP 800-218 Secure Software Development Framework (SSDF), and applicable DoD cybersecurity requirements.

· Understanding of DoD RMF processes and security control implementation.

· Experience developing cybersecurity requirements and verification criteria.

· Ability to translate cybersecurity requirements into language understandable to engineering, manufacturing, test, and program personnel.

· Experience with cybersecurity risk assessment and vulnerability management.

· Knowledge of secure software architecture and secure coding concepts.

· Understanding of Linux security and system hardening.

· Experience with vulnerability assessment technologies such as ACAS, Nessus, SCAP/STIG tools, or equivalent platforms.

· Familiarity with SAST, DAST, SCA, dependency scanning, secrets scanning, and software supply-chain security.

· Security+ or CISSP certification

· Must be a US citizen and the ability to obtain and maintain an active secret clearance.

· Must be a resident of Huntsville, AL or willing to relocate to the Huntsville, AL area.

Preferred Qualifications

• Strong communication and documentation skills
• Ability to work in a highly-technical, team-oriented environment that includes customers and co-workers
• Strong desire to learn and constantly improve

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.