Principal Cybersecurity Engineer

Leidos

. Protect customer information systems, networks, and infrastructure from cyber threats and vulnerabilities .

Posted 10/14/2026full-timeUnited StatesLead💰 $131,300 - $237,350 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity practices, including incident response, vulnerability management, and compliance with cybersecurity standards. Proficient in managing and implementing security tools and technologies, with a strong focus on automation and collaboration within DevSecOps environments.

Highest-signal resume keywords

Cybersecurity Incident ResponseSIEM Tool ManagementVulnerability Management ProgramsCybersecurity AuditsActive TS/SCI Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Endpoint Security TechnologiesNetwork Security TechnologiesSecurity Design PrinciplesRisk Management Framework (RMF)Intrusion DetectionConfiguration ManagementChange ControlCybersecurity AssessmentsThreat Intelligence AnalysisAutomation of Operations Tasks

Soft Skills

CollaborationAnalytical ThinkingProblem SolvingCommunication

Tools & Technologies

Splunk Enterprise SecurityCarbon Black EDRHBSS/TrellixRapid7Tenable/NessusAnsibleCloudFormationAWSGoogle Cloud PlatformLinux/Red Hat Administration

Certifications & Qualifications

Security+CISSPCySA+CEHGCIH

Industry Keywords

DevSecOpsCybersecurity ComplianceIncident DetectionVulnerability ScanningSecure Configuration Baselines

Tech Stack

Tools & technologies

AnsibleAWSCloudCyber SecurityFirewallsGoogle Cloud PlatformLinuxOraclePythonSplunkTypeScript

About the role

Key responsibilities & impact

Protect customer information systems, networks, and infrastructure from cyber threats and vulnerabilities
Design, implement, maintain, manage, monitor, and upgrade security controls and tools
Identify opportunities to automate repeatable operations tasks
Configure, troubleshoot, and maintain firewalls, endpoint protection tools, and SIEM platforms such as Splunk Enterprise Security
Monitor system and network security to detect, analyze, and respond to threats or anomalous activity
Investigate and remediate cybersecurity incidents, including breaches and malware infections
Participate in change management to maintain security compliance and prevent new vulnerabilities
Audit systems and configurations against cybersecurity policies, standards, and secure configuration baselines
Collaborate with engineering, development, operations, ISSEs, ISSMs, software developers, systems engineers, and government stakeholders throughout the DevSecOps lifecycle
Monitor security advisories, bulletins, and threat intelligence
Enforce secure system configurations and cybersecurity compliance requirements
Review vulnerability scan results, assess risk, and coordinate remediation with system owners and technical teams
Manage and track POA&Ms for customer-sponsored systems and coordinate with ISSOs, ISSEs, ISSMs, and SCAs

Requirements

What you’ll need

BS degree and 12 or more years of prior relevant experience, or MS degree and 10 or more years of prior relevant experience; additional years of experience may be substituted in lieu of a degree
Must have an active TS/SCI with a Polygraph
Experience implementing and managing SIEM tools such as Splunk or similar platforms
Experience with endpoint and network security technologies, including IDS/IPS, HBSS/Trellix, Carbon Black EDR, and related defensive security tools
Experience reviewing and analyzing cybersecurity event logs to identify indicators of compromise or suspicious activity
Experience supporting incident response plans, vulnerability management programs, risk management plans, and POA&Ms
Experience conducting or supporting technical cybersecurity assessments and security audits
Experience identifying system vulnerabilities and non-compliance with cybersecurity standards and regulatory requirements
Experience collaborating with DevSecOps teams to review vulnerability scan results and support remediation
Experience supporting RMF authorization and ATO activities
Experience applying system security engineering principles, including security design, lifecycle engineering, authentication and authorization, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control
Professional cybersecurity certification such as Security+, CISSP, CySA+, CEH, or GCIH
Preferred: experience with Rapid7, Tenable/Nessus, HBSS/Trellix, SonarQube, Fortify, Chainguard, EDR platforms, STIG viewers, and compliance tools
Preferred: experience with network and application firewalls, incident detection platforms, and digital forensic tools
Preferred: Ansible or CloudFormation, Agile environments, Python or PowerShell
Preferred: familiarity with AWS, Oracle Cloud, or Google Cloud Platform
Preferred: SolarWinds, DevSecOps pipelines, CI/CD security tools, and Linux/Red Hat administration or security

Benefits

Comp & perks

Paid Time Off
11 paid Holidays
401K with a 6% company match and immediate vesting
Flexible Schedules
Discounted Stock Purchase Plans
Technical Upskilling
Education and Training Support
Parental Paid Leave