# Cloud Cyber Security Engineer

**Company**: Leidos
**Location**: Bethesda, MD
**Experience**: senior
**Job type**: full-time
**Salary**: $131,300.00 - $237,350.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Bethesda-MD/Senior-Security-Architect_R-00195402?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_7518015f-7bb

## Description

We are seeking a Cloud Cyber Security Engineer to play a critical role in the accreditation of a state-of-the-art technology stack under the DOMEX Technology Platform (DTP). As a Cloud Cyber Security Engineer, you will provide technical security expertise in securing, hardening, and maintaining compliance of cloud-based software platforms and infrastructure across multiple secure networks.

**Key Responsibilities:**

- Validate and verify system security requirements and establish system security designs for large-scale systems

- Recommend and develop technical solutions, products, and standards based on current and desired system security architecture

- Collaborate with compliance personnel, software engineers, system engineers, system architects, and Government counterparts to perform systems and cyber security engineering tasks

- Participate in Program Increment Planning and related agile team activities

- Work closely with System Engineering, Test Engineering, and Integration teams to ensure that the hardware and software architecture and implementation meet security requirements

- Evaluate the impact of new development on the operational security posture of the system

- Serve as a subject matter expert in security architecture

- Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models

- Design security architectures and solutions spanning AWS, Azure, GCP, and OCI

- Architect integrations between native security services and enterprise security platforms

- Knowledge of Kubernetes and container security architectures

- Design, engineer, and implement enterprise network security architecture

- Evaluate the current network security architecture, identify gaps and improvement opportunities, and develop practical engineering plans

- Provide specifications for network security architecture, evaluate and recommend emerging security technologies, and perform needs assessments

- Tune and optimize security controls to reduce false positives, close coverage gaps, and improve detection and enforcement

**Requirements:**

- Active or current Top Secret/SCI and the ability to obtain Polygraph

- Bachelor of Science degree from an accredited university in Computer Science, Information Assurance, Information Security System Engineering or related field with a minimum of 12 years of experience as an Information Systems Security Engineer (ISSE) or System Engineer

- At least one IAT and one IAT Level II or higher certification

- Solid understanding of security practices and policies and hands-on vulnerability testing experience

- Experience applying Risk Management Framework

- Demonstrated knowledge of and experience with common security tools

- Extensive experience designing enterprise security solutions and translating security requirements into implementable technical architectures

- Knowledge of Kubernetes and container security architectures

- Experience designing solutions involving SIEM, vulnerability management, identity security, network security, secrets management, container scanning, and data protection technologies

**Nice to Have:**

- Active TS/SCI with polygraph

- Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS

- Five (5) years of experience with Defense in Depth Principals/technology

- DoD 8570 compliance with IASAE Level 2 or 3

- Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools

- Extensive experience hardening modern operating systems

- Information Systems Security Engineering Professional (ISSEP) Certification

- Computer Information Systems Security Professional (CISSP) Certification

## Skills

### Required
- Cloud Cyber Security
- Risk Management Framework
- Kubernetes
- Container Security
- SIEM
- Vulnerability Management
- Network Security
- Secrets Management
- Data Protection
- ACAS
- Prisma Cloud
- Splunk

### Nice to have
- Commercial Cloud Services
- Defense in Depth
- DoD 8570
- IASAE Level 2 or 3
- Trellix/ESS
- SteelCloud ConfigOS
- STIG Manager
- Information Systems Security Engineering Professional (ISSEP)
- Computer Information Systems Security Professional (CISSP)

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Bethesda-MD/Senior-Security-Architect_R-00195402?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)