Cybersecurity Engineer SME

Overview As a Cybersecurity Engineer SME at Leidos, you protect mission systems by designing, implementing, and maintaining security controls across enterprise networks. You’ll collaborate with ISSEs, ISSMs, developers, and government stakeholders throughout the DevSecOps lifecycle to ensure compliance and resilience. You’ll deploy security technologies, support incident response, and drive secure configurations and risk-based improvements at scale. This role offers a mission-driven environment with advanced cybersecurity tooling and threat intelligence. Compensation / BenefitsPaid Time Off11 paid Holidays401K with 6% company match and immediate vestingFlexible SchedulesDiscounted Stock Purchase PlansTechnical Upskilling, Education and Training Support ResponsibilitiesPlan, implement, monitor, and upgrade security controls and tools for enterprise systems and networks, with focus on automating repeatable tasksDesign, configure, troubleshoot, and maintain security technologies (firewalls, endpoint protection, SIEM) and monitor with SIEM (Splunk)Support investigation and remediation of cybersecurity incidents and changes while maintaining complianceAudit configurations for policy adherence and secure baselinesCollaborate with cross-functional teams to integrate security controls into DevSecOps pipelines and system architecturesMonitor advisories and threat intelligence to stay ahead of vulnerabilities and trendsAssist with vulnerability management by reviewing scan results and coordinating remediationSupport RMF/ATO activities and risk-based security documentation and recommendationsManage POA&Ms with key stakeholders (ISSOs, ISSEs, ISSMs, SCAs)Apply system security engineering principles across design, lifecycle, authentication/authorization, cryptography, incident handling, auditing, and change control Key requirementsExperience implementing and managing SIEM tools (e.g., Splunk)Experience with endpoint and network security technologies (IDS/IPS, HBSS/Trellix)Experience analyzing cybersecurity event logs for indicators of compromiseExperience supporting incident response, vulnerability management, risk management, and POA&MsExperience conducting security assessments and auditsExperience collaborating with DevSecOps to remediate findingsExperience supporting RMF authorization and ATO activitiesExperience applying security engineering principles across system lifecycles and configurationsProfessional cybersecurity certifications (Security+, CISSP, CySA+, CEH, or GCIH)MS degree and 15+ years of relevant experience (additional years may substitute)collaboration with cross-functional teamscommunication and stakeholder engagementproactivity in automation and process improvementSplunk (and Splunk Enterprise Security)HBSS/Trellixfirewalls and security groups