Senior Cloud Cybersecurity Engineer

Leidos has an exciting opening for you, our next Senior Cloud Cybersecurity Engineer, to play a critical role in the accredition and operion of a ste-of-the-art technology stack under the DOMEX Technology Plform (DTP) where we support our client’s mission to centralize and standardize Tasking, Collection, Processing, Exploition and Disseminion (TCPED) of Open Source Intelligence (OSINT) across the Defense and Intelligence Community enterprises. We leverage cloud-based computing, artificial intelligence (Al), machine learning (ML), and cross-domain transfer systems to provide cutting edge da exploition, enrichment, triage, and analytics capabilities to the Defense Intelligence Enterprise., * Collect, review, assess, and provide feedback on system cybersecurity, architecture, and engineering artifacts

• Collect, review, assess, and provide feedback on system cybersecurity Body-of-Evidence (BOE) results required to support DoD & IC RMF cybersecurity authorizion processes
• Conduct periodic compliance scanning, vulnerability assessments, and risk analysis for cloud-based systems
• Implement and manage security controls for containerized applicions and the underlying cloud-based infrastructure
• Collabore with DevSecOps, infrastructure, and software development teams to ensure secure coding and engineering practices
• Ensure integrion of security measures into software development processes, CI/CD pipelines, and engineering tools
• Develop, maintain, and execute shell commands, scripts, and automion code for STIG compliance and validion
• Implement and manage continuous monitoring solutions of cloud-based architectures
• Support Government cybersecurity officials & program personnel in preparing cybersecurity packages, including Interim Authority to Test (IATT) packages, Authority to Opere (ATO) packages, and Change Requests (CRs)
• Stay current with emerging cloud security thres, technologies, and best practices

• Clearance: Active or current Top Secret with SCI eligibility and the ability to obtain Polygraph
• Educion & Experience: Bachelor’s degree in Cybersecurity, Computer Science, Informion Assurance, Engineering, or reled technical discipline and 12-15 years of relevant experience OR Master’s degree with 10-13 years of relevant experience. Additional years of experience may be considered in lieu of a degree. ISSO experience must be supplemented with demonstred technical expertise.
• Certificion: At least one DoD 8570.01-M IAT or IAM Level II or higher certificion e.g., CCNA Security, CySA+, Security+ CE, CISSP (or Associe) and the ability to obtain Privileged User Account (PUA)/eleved access per DoD 8570 policy

To be successful in this role you will need:

• Hands-on experience with Linux opering systems and scripting languages such as Bash, Python, Perl or similar
• Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS
• Experience securing software applicions and infrastructure by implementing security controls
• Experience supporting RMF processes such as authorizion and continuous monitoring
• Experience with NIST SP 800-37, SP 800-53 Rev4 or Rev5, CNSSI 1253, and applicable DoDI publicions
• Experience implementing and validing STIG compliance across opering system, dabase, server, and applicion tiers
• Experience with RMF/GRC plforms such as Xacta or eMASS
• Experience with performing compliance & vulnerability scans and reled security tools for SIEM & event management, SAST, DAST
• Demonstred understanding of unique security thres in the cloud and the required corresponding system security posture
• Demonstred understanding of how to secure Kubernetes plforms and integre security into CI/CD pipelines, containers, and plform orchestrion tools.

You will wow us even more if you have these skills:

• Active TS/SCI with polygraph
• Experience supporting the Intelligence Community in RMF activities with ICD 503 and reled compliance directives, policies, procedures
• Multiple IAT/IAM II or III advanced certificions such as:
• CISSP-ISSAP/ISSEP
• CISM
• CCSP
• Security X/CASP+
• Cloud certificions such as:
• AWS Solutions Architect
• AWS Security Specialty
• Kubernetes and Cloud Nive Associe (KCNA)
• Certified Kubernetes Administror (CKA)
• Certified Kubernetes Security Specialist (CKS)
• Linux certificions such as:
• Linux+
• Red H Certified System Administror - Enterprise Linux (RHCSA)
• Red H Certified Engineer - Enterprise Linux (RHCE)
• Red H Certified Architect - Enterprise Linux (RHCA)
• Prior network engineering experience with encryption and transport in the cloud
• Experience applying DoW Zero Trust framework
• Experience applying security controls to various AI implementions

• Understanding of secure software development practices and code reviews in Agile and DevSecOps environments

• NMECDTP-Leidos

Through training, teamwork, and exposure to challenging technical work, let Leidos show how to accelere your career ph. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company mch and immedie vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Educion and Training Support, Parental Paid Leave, and much more. Join us and make a difference in Analysis Solutions Business Area!

If you’re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the stus quo - because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already step 30 - and moving faster than anyone else dares., Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovions. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximely $16.7 billion for the fiscal year ended January 3, 2025. For more informion, visit www.Leidos.com.