# Cybersecurity Engineer-Product Development **Company**: Leidos **Location**: Huntsville, AL **Work arrangement**: onsite **Experience**: senior **Job type**: full-time **Salary**: $107,900.00 - $195,050.00 **Category**: Engineering **Industry**: Technology **Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Huntsville-AL/Cybersecurity-Engineer---Product-Development-Lead_R-00196706-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/job/cybersecurity-engineer-product-development-39420159-535/ ## Description Leidos' Defense Senior Research and Analysis Division is seeking a Cybersecurity Engineer-Product Development to work in its Leidos office in Huntsville, AL. This is an exciting opportunity to use your experience to support development, integration, testing, production, delivery, and sustainment of complex defense systems and software products. The ideal candidate will work closely with Systems Engineering, Software Engineering, Hardware Engineering, DevSecOps/IT, Software Assurance, Configuration Management, Test & Evaluation, Manufacturing, Program Management, and Government cybersecurity stakeholders. The Cybersecurity Engineer is responsible for helping shepherd the system from initial requirements and architecture through design, implementation, integration, cybersecurity assessment, RMF activities when applicable, qualification, production readiness, fielding, and sustainment. Responsibilities: - Identify applicable cybersecurity requirements derived from DoD policies, NIST publications, DFARS clauses, CMMC requirements, RMF controls, Security Technical Implementation Guides (STIGs), program protection requirements, Supply Chain Risk Management (SCRM), and customer-specific security requirements. - Assist Systems Engineering in establishing system security boundaries, trust boundaries, information flows, external interfaces, and cybersecurity assumptions and constraints. - Participate in system and software architecture development and design reviews. - Evaluate system architecture for cybersecurity weaknesses and recommend practical risk-reduction measures. - Provide cybersecurity engineering guidance for authentication, authorization, least privilege, encryption, key management, logging, auditing, secure communications, interface protection, network segmentation, and data protection. - Perform or coordinate vulnerability assessments using tools such as ACAS/Nessus, SCAP/STIG assessment tools, SAST/SCA platforms, network analysis tools, and other approved cybersecurity assessment capabilities. - Develop remediation recommendations in coordination with engineering teams. - Support preparation and maintenance of RMF artifacts, including system diagrams, data-flow diagrams, hardware/software inventories, ports/protocols/services information, security assessment results, vulnerability records, and Plans of Action and Milestones (POA&Ms). - Support IATT, ATO, Assess-Only, or other authorization/assessment approaches as applicable to the program. - Ensure authorization documentation accurately represents the actual engineered and production system rather than treating RMF documentation as a separate compliance activity. Basic Qualifications: - Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Software Engineering, Systems Engineering, Electrical Engineering, Information Technology, or a related technical discipline with 8 years of cybersecurity engineering experience. In lieu of a degree, a combination of education, military experience, and directly applicable engineering experience plus 11 years may be considered. - Experience supporting cybersecurity for software-intensive or defense systems from development through test, production, and fielding is strongly preferred. - Strong understanding of secure system and software engineering principles. - Working knowledge of NIST SP 800-53, NIST SP 800-37 RMF, NIST SP 800-171, NIST SP 800-218 Secure Software Development Framework (SSDF), and applicable DoD cybersecurity requirements. - Understanding of DoD RMF processes and security control implementation. - Experience developing cybersecurity requirements and verification criteria. - Ability to translate cybersecurity requirements into language understandable to engineering, manufacturing, test, and program personnel. - Experience with cybersecurity risk assessment and vulnerability management. - Knowledge of secure software architecture and secure coding concepts. - Understanding of Linux security and system hardening. - Experience with vulnerability assessment technologies such as ACAS, Nessus, SCAP/STIG tools, or equivalent platforms. - Familiarity with SAST, DAST, SCA, dependency scanning, secrets scanning, and software supply-chain security. - Security+ or CISSP certification. - Must be a US citizen and the ability to obtain and maintain an active secret clearance. - Must be a resident of Huntsville, AL or willing to relocate to the Huntsville, AL area. Preferred Qualifications: - Strong communication and documentation skills. - Ability to work in a highly-technical, team-oriented environment that includes customers and co-workers. - Strong desire to learn and constantly improve. Pay Range: $107,900.00 - $195,050.00 For more fresh new jobs, check out [yubhub.co](https://yubhub.co/). ## Skills ### Required - NIST SP 800-53 - NIST SP 800-37 RMF - NIST SP 800-171 - NIST SP 800-218 Secure Software Development Framework (SSDF) - DoD cybersecurity requirements - Secure system and software engineering principles - Cybersecurity risk assessment and vulnerability management - Secure software architecture and secure coding concepts - Linux security and system hardening - Vulnerability assessment technologies such as ACAS, Nessus, SCAP/STIG tools - SAST, DAST, SCA, dependency scanning, secrets scanning, and software supply-chain security - Security+ or CISSP certification ### Nice to have - Strong communication and documentation skills - Ability to work in a highly-technical, team-oriented environment - Strong desire to learn and constantly improve --- Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Huntsville-AL/Cybersecurity-Engineer---Product-Development-Lead_R-00196706-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)