Description
As a Cyber Security Engineer at Leidos, you will play a crucial role in protecting IT infrastructure by using a blend of technical expertise and strategic planning to ensure that the digital infrastructure remains secure from various types of attacks and vulnerabilities.
You will be responsible for planning and implementing appropriate security controls to ensure that the information within is kept secure.
Main Objectives:
- Vulnerability Scanning & Reporting: Perform regular vulnerability scans and generate reports utilising tool sets such as Code Scans, Vulnerability Management Tooling, and Reporting.
- Endpoint Security: Perform regular updates to Endpoints to ensure the latest packages are applied and policies are amended to keep up to date with new and emerging threats.
- Incident Management & Tickets: Help to recognise and confirm potential incidents through alerts, logs, and user reports, and respond to potential security breaches or cyber-attacks.
- System Hardening: Ensure that the security tool sets are kept up to date with regular security patches and software updates to fix vulnerabilities and improve system security.
- Change Work: Assist in evaluation and impact assessment of system change to security posture of the environments.
- Participation in Regular Meetings: Lead or attend numerous meetings that require your input, such as Security Working Group, Vulnerability Triage, Security Workshop, PI Planning, and Daily Standups.
- Documentation: Create, maintain, and review detailed documentation, including High-Level & Low-Level Designs, Standard Operating Procedures, and compliance reports.
Essential Experience:
- Proven experience in a cyber security engineering role, delivering security outcomes across IT environments (on-prem and/or cloud).
- Practical experience implementing security tooling and Security policies.
- Demonstrable knowledge of secure configuration and hardening practices, and ability to apply benchmarks/standards (e.g., CIS, NIST, STIG) pragmatically.
- Hands-on experience with vulnerability management and risk-based prioritisation, including working with engineering teams to drive remediation.
- Experience supporting incident response activities, including investigation, containment, and lessons learned.
- Ability to communicate technical security issues clearly to non-specialists and support governance/assurance decision-making.
- Experience producing quality security documentation and evidence suitable for audit/assurance.
Desirable Certifications:
- AWS security-related certifications (e.g., AWS Certified Security – Specialty) or equivalent cloud security experience.
- CISSP.
- Degree or postgraduate qualification in cyber security, such as a master’s or PhD in Information Security, Cyber Security, or a related discipline.
Benefits:
- Contributory Pension Scheme
- Private Medical Insurance
- 33 days Annual Leave (including public and privilege holidays)
- Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays, and a cycle to work scheme)
- Flexi-Time