Security Engineer

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 4+ years of relevant professional experience. In lieu of degree, additional experience may be required.\n
• Experience supporting endpoint-security technologies, cybersecurity monitoring, security engineering, or enterprise cybersecurity operations.\n
• Experience validating deployment, configuration, connectivity, or reporting of endpoint-security tools.\n
• Experience troubleshooting endpoint-security, server, workstation, or enterprise security-tool issues.\n
• Experience with cybersecurity scanning, mitigation, compliance checking, or security configuration assessment.\n
• Understanding of endpoint-security telemetry, security-event generation, centralized monitoring, and enterprise data-rollup concepts.\n
• Experience documenting technical findings, configuration issues, corrective actions, and remediation recommendations.\n
• Ability to work effectively with Government customers, cybersecurity personnel, system administrators, engineers, and Information Technology operations teams.\n
• U.S. Citizenship required.\n
• Active Secret security clearance required.\n, * Experience supporting Department of Defense endpoint-security or enterprise cybersecurity environments.\n
• Experience with enterprise endpoint detection, endpoint protection, vulnerability scanning, configuration-monitoring, or comparable cybersecurity technologies. - Remove the VN Scanning, add tool names Trellix, Tanium, etc.\n
• Experience with Defense Information Systems Agency Continuous Monitoring and Risk Scoring or comparable continuous-monitoring and compliance-reporting capabilities.\n
• Experience validating cybersecurity-tool coverage against enterprise asset inventories.\n
• Experience supporting Commercial-Off-The-Shelf (COTS) cybersecurity tools in large enterprise environments.\n
• Experience performing Tier 2 cybersecurity troubleshooting and coordinating technical issues through resolution.\n
• Familiarity with Department of Defense continuous-monitoring, Risk Management Framework, and cybersecurity compliance requirements.\n
• Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments.\n

n Looking for an opportunity to make an impact?\n \n \nAt Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.\n \n \nIf this sounds like a mission you want to be a part of, keep reading!\n \n Leidos is seeking experienced Security Engineers - Endpoint Security Tool Monitoring to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC. The Security Engineer will support enterprise endpoint-security monitoring by validating that endpoint security tools are properly configured, reporting required data, and integrating with enterprise cybersecurity monitoring and reporting capabilities. This position will identify coverage and configuration gaps, troubleshoot endpoint-security issues, and develop recommendations that improve data collection, alerting, and threat response.\n \n \nMission Environment\n \n DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data.\n \n The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). Endpoint-security capabilities provide a critical source of cybersecurity visibility across this environment. The Security Engineer will help ensure endpoint tools are deployed, configured, communicating, and providing reliable security data to the enterprise systems used for continuous monitoring, compliance reporting, and threat response.\n \n \nPrimary Responsibilities\n \n \n

• Support comprehensive cybersecurity monitoring and oversight of endpoint-security capabilities across the DHRA enterprise.\n
• Validate that endpoint-security tools are properly deployed, configured, operational, and reporting required data.\n
• Verify upstream rollup of endpoint-security data into applicable enterprise cybersecurity monitoring and reporting systems.\n
• Validate endpoint-security reporting through the Defense Information Systems Agency Continuous Monitoring and Risk Scoring (DISA CMRS) capability, as applicable.\n
• Maintain weekly records of endpoint-security data-rollup validation, coverage, configuration status, and identified deficiencies.\n
• Identify and document systems or environments that are incorrectly configured, not reporting, or providing incomplete endpoint-security data.\n
• Escalate endpoint-security configuration, connectivity, coverage, and reporting issues for corrective action.\n
• Develop recommendations to optimize endpoint-security configurations to improve data collection, alert generation, visibility, and threat response.\n
• Provide technically supported configuration recommendations to Government tool administrators for implementation.\n
• Support network and server security scanning and validation activities associated with endpoint-security monitoring.\n
• Perform compliance checks and cross-reference endpoint-security results against applicable Department of Defense, DHRA, and DMDC cybersecurity requirements.\n
• Troubleshoot endpoint-security tool configuration, connectivity, deployment, data-rollup, and reporting issues.\n
• Support Tier 2 troubleshooting and coordinate resolution with Government tool administrators, system owners, network and infrastructure teams, and cybersecurity personnel.\n
• Evaluate recurring endpoint-monitoring results to identify coverage gaps, configuration trends, or systemic issues that may affect enterprise cybersecurity posture.\n
• Document monitoring results, technical findings, corrective actions, and configuration recommendations.\n
• Support improvements to endpoint-monitoring procedures, technical baselines, and cybersecurity monitoring practices.\n