Cyber Security Engineer – SME

Leidos

. Protect customer information systems, networks, and infrastructure from cyber threats and vulnerabilities .

Posted 10/14/2026full-timeUnited StatesSeniorLead💰 $154,050 - $278,475 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity practices, including incident response, vulnerability management, and security compliance. Proficient in managing SIEM tools, endpoint protection technologies, and applying system security engineering principles.

Highest-signal resume keywords

Active TS/SCI With PolygraphSIEM Tool Management (Splunk)Endpoint Security Technologies (IDS/IPS, Carbon Black EDR)Cybersecurity Incident ResponseProfessional Cybersecurity Certification (CISSP, Security+)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Incident ResponseVulnerability ManagementSecurity AuditsSystem Security EngineeringThreat Intelligence MonitoringConfiguration ManagementChange ControlRisk Management Framework (RMF)Automation of Operations TasksCybersecurity Policy Compliance

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

Splunk Enterprise SecurityHBSS/TrellixCarbon Black EDRAnsibleCloudFormationSolarWindsDevSecOps PipelinesCI/CD Security ToolsLinux/Red HatDigital Forensic Tools

Certifications & Qualifications

CISSPSecurity+CySA+CEHGCIH

Industry Keywords

DevSecOpsCybersecurity StandardsCompliance ToolsIncident DetectionRisk-Based Recommendations

Tech Stack

Tools & technologies

AnsibleAWSCloudCyber SecurityFirewallsGoogle Cloud PlatformLinuxOraclePythonSplunkTypeScript

About the role

Key responsibilities & impact

Protect customer information systems, networks, and infrastructure from cyber threats and vulnerabilities
Design, implement, maintain, monitor, and upgrade security controls and tools
Identify opportunities to automate repeatable operations tasks
Configure, troubleshoot, and maintain firewalls, endpoint protection tools, and SIEM platforms
Monitor system and network security using Splunk Enterprise Security to detect and respond to threats
Investigate and remediate cybersecurity incidents, breaches, and malware infections
Participate in change management to maintain security compliance and prevent vulnerabilities
Audit systems and configurations against cybersecurity policies, standards, and secure configuration baselines
Collaborate with engineering, development, operations, and government stakeholders across the DevSecOps lifecycle
Monitor security advisories, bulletins, and threat intelligence
Support vulnerability management by reviewing scans, assessing risk, and coordinating remediation
Support RMF authorization and ATO activities, including security documentation and risk-based recommendations
Manage and track POA&Ms with ISSOs, ISSEs, ISSMs, and SCAs

Requirements

What you’ll need

MS degree and 15 or more years of prior relevant experience; additional years of experience may be substituted in lieu of a degree
Must have an active TS/SCI with a Polygraph
Experience implementing and managing SIEM tools such as Splunk or similar platforms
Experience with endpoint and network security technologies, including IDS/IPS, HBSS/Trellix, Carbon Black EDR, and related defensive security tools
Experience reviewing and analyzing cybersecurity event logs to identify indicators of compromise or suspicious activity
Experience supporting incident response plans, vulnerability management programs, risk management plans, and POA&Ms
Experience conducting or supporting technical cybersecurity assessments and security audits
Experience identifying system vulnerabilities and non-compliance with cybersecurity standards and regulatory requirements
Experience collaborating with DevSecOps teams to review vulnerability scan results and support remediation
Experience supporting the RMF authorization process and ATO activities
Experience managing and tracking POA&Ms
Experience applying system security engineering principles, including security design, lifecycle engineering, authentication and authorization, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control
Professional cybersecurity certification such as Security+, CISSP, CySA+, CEH, or GCIH
Preferred: experience with Rapid7, Tenable/Nessus, HBSS/Trellix, SonarQube, Fortify, Chainguard, EDR platforms, STIG viewers, and compliance tools
Preferred: experience with network and application firewalls, incident detection platforms, and digital forensic tools
Preferred: experience with Ansible, CloudFormation, Agile environments, Python, or PowerShell
Preferred: familiarity with AWS, Oracle Cloud, or GCP
Preferred: experience with SolarWinds, DevSecOps pipelines, CI/CD security tools, and Linux/Red Hat

Benefits

Comp & perks

Paid Time Off
11 paid Holidays
401K with a 6% company match and immediate vesting
Flexible Schedules
Discounted Stock Purchase Plans
Technical Upskilling
Education and Training Support
Parental Paid Leave