Senior Security Engineer

GEO SPACES - Senior Security Engineer

• Join Leidos & work on AGO GEO SPACES mission critical networks
• GEO SPACES Security Operations Capability
• TSPV, willing to undergo a DISA, located in Canberra

Due to the nature of the role, you must be an Australian Citizen who holds a TSPV security clearance; accompanied by the ability to be successful for a DISA/OSA.

Your New Role and Responsibilities

This role will report directly to the GEO SPACES Security Operations Team Lead and be capable of operating independently within the scope of their duties. There is an element of flexibility in this role based on available skills and experience. Security Engineers will work closely with the Cyber Security Analysts as well as independently to deliver the following functions:

Do Work That Matters

Primary roles and responsibilities:

• System security controls review and implementation - OS, application and network hardening in accordance with DSPF and ISM controls.
• System log on-boarding into centralised SIEM including log normalisation, log forwarder deployment and configuration.
• Security tool deployment and configuration.
• Detection engineering including testing, validation, playbook development and quality assurance.
• System security advice and collaboration with network and operations teams, including IT security engineering of; endpoint, network, gateway and other Configuration Items

In-depth experience with:

• SIEM technologies - Splunk
• AWS and AWS security applications
• EDR/XDR tools
• Cloud and web application firewalls
• IDAM
• OS SOE hardening - Linux and Windows
• Windows AD, Server and group policies

Secondary duties:

• Cyber Threat Intelligence platform and feed integration and maintenance
• Vulnerability Management platform and tools, integration and maintenance
• Quality Assurance and Control of SOC investigations and response
• Support complex and emergency Incident Response activities using a range of cloud and other response tools, techniques and procedures.
• Conduct Research, Development and Testing of novel and emerging technologies, threats and opportunities in the cyber security domain
• Support Hunt activities using industry frameworks
• Provide trusted advisory services
• Develop security operations related system requirements
• Change review and approvals
• Develop and maintain stakeholder relationships, including with partner SOCs and security authorities in and out of Defence

Join us at a pivotal time as we introduce multiple new systems over the first 12-18 months, creating exciting opportunities to shape and mature our evolving capability.

During that period, it is expected that the following will mature within the Security Operations team:

• Team structure and alignment to capability delivery to support the larger team and expected higher cadence of work
• Process and procedure for both internal operations and engagement with external capabilities
• Reporting within the Leidos structure, the agency and other authorities.

What You’ll Bring to Make An Impact

Experience levels that are commensurate with various levels of security operations roles, a passion for IT security operations and the ability to work well as part of our team.

This role will primarily focus on the on-boarding of new systems, ensuring that appropriate technical security controls are implemented and effective centralised monitoring can be achieved. It is expected that you will work independently from the central SOC for a significant amount of time, and closely with system engineering teams to achieve security specific requirements. When not on-boarding new systems, this role will work within the SOC Security Engineering team, in support of enduring activities listed in the ‘Secondary Duties’ section.

This is a senior role, where candidates will have 5 - 10 years’ experience delivering the functions listed in Role Description, motivation to drive growth and maturation of existing capabilities and willingness to contribute to the growth of junior team members. Ideally, previous experience working in an AGO, ASD, other intelligence agencies or Defence, and an understanding of key stakeholders and processes associated with delivering security operations in a Defence context.

Additional information

Due to the nature of the role, you must be an Australian Citizen who holds a acive TSPV security clearance; accompanied by the ability to be successful for a DISA/OSA.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.