Security Tools Engineering Lead

We are seeking a Security Tools Engineering Lead to join our team within the Enterprise Security Services (ESS) division, focusing on the NOAA Cyber Security Center contract.  Must possess active DOD Top-Secret clearance.

This position is in either Fairmont, WV or Boulder, CO.

Primary Responsibilities:

  - Perform development on cybersecurity system components as assigned, to include Security Orchestration, Automation, and Response (SOAR) and Security Information and Event Management (SIEM) tools.

  - Develop integrations between cybersecurity stack components as assigned.

  - Draft and maintain system design documentation for all assigned system components according to system design life cycle (SDLC) best practices.

  - Analyze customer requirements and provide best approach, feasibility of implementation, level of effort feedback as necessary.

  - Serve as liaison for professional services engagements, where available and as needed, to define and translate customer requirements.

Basic Qualifications:

  - Requires a technical BS degree and 4-8 years of prior relevant experience or master's with 2-6 years of prior relevant experience.

  - Software/product development skills in multiple languages (Python, Javascript (React Framework), Powershell, etc.)

  - Have strong communication skills

  - Ability to work autonomously with minimal oversight

  - Knowledge of development on classified systems and the required security guidelines associated with secure facilities

  - Experience with Information Assurance (IA) hardening and compliance (STIG, CIS, DSS compliance, documentation, etc.)

- Experience with load balancing, reverse proxy setups, and ensuring high availability and security for web applications using tools such as nginx.

- Experience in designing, deploying, and managing containerized applications using Docker or Podman. Familiarity with container orchestration tools, CI/CD integration, and maintaining container performance and health.

  - Active Secret clearance and ability to obtain Top Secret clearance

Desired Qualifications:

  - Distributed event streaming platforms (Apache Kafka, Cloudera, Informatica, etc.)

  - Working knowledge of SIEM platforms (ArcSight, Elasticsearch, Splunk, etc.)

  - Experience supporting Infrastructure-as-Code (IaC) transformations.

  - Provided direct support to a Security Operation Center environment

  - Familiarity with task automation

  - Must be able to work collaboratively with other system administrators, system engineers, and network engineers in a team environment

Will be required to attain basic cybersecurity skills certification within 90 days of hire (CySA+, etc)

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.