# Cyber Security Engineer **Company**: Leidos **Location**: Farnborough, Hampshire **Job type**: full-time **Salary**: £47,600.00-£61,000.00 **Category**: Security **Industry**: Technology **Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Farnborough-Hampshire-UK/Cyber-Security-Engineer_R-00194554-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_062e992d-505 ## Description The UK National Security, Defence and Intelligence Sector at Leidos currently has an opening for a Cyber Security Engineer to support delivery of a government contract. This is an embedded security engineering delivery role. You will work as part of the engineering team to build, configure, integrate, operate and improve security controls used by services across Azure, hybrid environment. Working with guidance from senior engineers and architects where needed, you will take defined changes through build, deployment, test and operational support. You will deliver security capabilities alongside cloud, platform, network, application and DevOps engineers, including Azure controls, identity and access controls, GitHub and JFrog security integrations, pipeline guardrails, security monitoring and vulnerability remediation. You will also contribute to low-level designs, assurance evidence and technical documentation, building your architecture and assurance knowledge through practical implementation. **Primary Responsibilities** - Deliver assigned security controls as an embedded member of the engineering team, supporting build, configuration, deployment, testing, operation and continuous improvement - Configure and maintain Azure security controls, including Azure Policy, Network Security Groups, private endpoints, Key Vault, Defender for Cloud, Azure Monitor, Log Analytics, workload protection and landing-zone controls - Implement and maintain identity and authorisation controls using Microsoft Entra ID, role-based access control (RBAC), attribute-based access control (ABAC), managed identities, service principals, Conditional Access and least-privilege principles - Configure security controls within GitHub and JFrog workflows, including repository and branch protections, package and artefact controls, and code, dependency, secret, container and artefact scanning - Support security controls in CI/CD pipelines using GitHub Actions and associated tooling, including policy checks, software composition analysis, static and dynamic testing, infrastructure scanning and approval gates - Develop and maintain security automation using infrastructure as code, policy as code, scripting and APIs, following established engineering standards and review processes - Work with software, platform, cloud, network and service engineers to integrate security controls, resolve implementation issues and address security defects before release - Support security technologies in service through configuration, health monitoring, upgrades, rule and policy tuning, incident support and routine lifecycle activities - Triage vulnerability findings, implement agreed remediation, update delivery backlogs and support retesting and closure - Configure security telemetry, alerts and integrations across Azure, applications, pipelines and engineering tooling, and assist with investigation and corrective action - Contribute to and maintain low-level design content, secure build standards, configuration baselines, test plans, runbooks and implementation evidence with review from senior colleagues - Contribute to threat modelling, data-flow reviews, control selection and secure integration patterns, and help validate that agreed controls work as intended - Support technical assurance by collecting implementation evidence, completing control checks and addressing review findings - Share knowledge with colleagues, contribute to reusable security components and suggest improvements to engineering practices **Basic Qualifications** - Practical experience supporting or delivering cyber security controls within a cloud platform or service engineering team - Working knowledge of security controls in cloud or hybrid environments, such as identity, networking, workloads, secrets and keys, policy, monitoring or security posture management - Some practical experience with Microsoft Azure or an equivalent cloud platform and an understanding of cloud security - Understanding of RBAC, ABAC, least privilege, managed identities, service principals or privileged access, with experience implementing at least some of these controls - Exposure to GitHub, JFrog, SonarQube or equivalent source-code, CI/CD and artefact platforms, including security scanning or repository controls - Some experience with automation, infrastructure as code, policy as code, scripting or APIs, or a willingness to develop these skills - Experience supporting technology in production, including monitoring, troubleshooting, controlled change or incident support - Ability to analyse vulnerability or security findings, implement defined remediation and provide evidence of completion - Ability to create clear technical documentation such as configuration records, implementation plans, test results and operating procedures - Ability to work independently on defined tasks, seek guidance appropriately and collaborate with software, cloud, platform, network, operations and assurance colleagues - Willingness and ability to obtain and maintain the security clearance required for the role **Preferred Qualifications** - Experience supporting security engineering within policing, central government, national security, defence or another regulated environment - Practical exposure to Azure Policy, Defender for Cloud, Azure Monitor, Log Analytics, Key Vault, Private Link, Network Security Groups or equivalent cloud-native technologies - Practical exposure to GitHub Enterprise, GitHub Actions, GitHub Advanced Security, JFrog Artifactory, JFrog Xray or comparable DevSecOps platforms - Exposure to cloud-native identity, workload, container, software-supply-chain, vulnerability-management or security-monitoring controls - Experience with Terraform, Bicep, PowerShell, Azure CLI or similar automation and infrastructure-as-code technologies - Awareness of security architecture and assurance methods, including threat modelling, secure design reviews and control assessment - A relevant technical, cloud or cyber security certification, or equivalent practical learning, such as Microsoft Azure Security Engineer, AWS security training, GitHub Advanced Security or CompTIA Security+ **What we do for you:** At Leidos we are committed to a truly diverse and inclusive culture. We foster a sense of belonging, welcoming all perspectives and contributions, and providing equal access to opportunities and resources for everyone. If you have a disability or need any reasonable adjustments during the application and selection stages please let us know, and we will respond in a way that best fits your needs. We provide an employment package that attracts, develops and retains only the best in talent. Our reward scheme includes: - Contributory Pension Scheme - Private Medical Insurance - 33 days Annual Leave (including public and privilege holidays) - Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays and a cycle to work scheme) - Flexi-Time ## Skills ### Required - Microsoft Azure - cloud security - identity and access controls - GitHub - JFrog - security monitoring - vulnerability remediation - automation - infrastructure as code - policy as code - scripting - APIs ### Nice to have - Azure Policy - Defender for Cloud - Azure Monitor - Log Analytics - Key Vault - Private Link - Network Security Groups - GitHub Enterprise - GitHub Actions - GitHub Advanced Security - JFrog Artifactory - JFrog Xray - Terraform - Bicep - PowerShell - Azure CLI --- Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Farnborough-Hampshire-UK/Cyber-Security-Engineer_R-00194554-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)