# Countermeasures Engineer

**Company**: Leidos
**Location**: Shiloh, IL
**Experience**: senior
**Job type**: full-time
**Salary**: $87,100.00 - $157,450.00
**Category**: Defence & Intelligence
**Industry**: Other

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Shiloh-IL/Countermeasures-Engineer_R-00193360?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_d60f7ff2-170

## Description

Join the front lines of national defense as a Countermeasures Engineer supporting the GSM-O II program. You'll provide critical network operations and cyber defense support to the Defense Information Systems Agency (DISA), protecting DoD and Combatant Command networks from the world's most sophisticated adversaries.

**Your Mission**

Countermeasure Development & Deployment:

- Design and deploy innovative, custom countermeasures to neutralize advanced threats and expose adversary activities on Classified terrain.

- Develop cutting-edge malware detection capabilities tailored to emerging threat actor techniques.

- Continuously evaluate countermeasure effectiveness against evolving Advanced Persistent Threats (APTs) and adjust strategies in real-time.

- Apply Detection-as-a-Code principles to create scalable, version-controlled security solutions.

Automation & Engineering Excellence:

- Architect and build automated cybersecurity solutions that deliver enterprise-wide protection at scale.

- Develop custom integrations, data correlation engines, and processing pipelines to reduce cyber risk across the DoD & Classified terrain.

- Conduct agile development and maintenance of automation scripts and tools using modern DevSecOps practices.

- Serve as a Subject Matter Expert (SME) for the automation team, mentoring others and driving technical innovation.

Threat Intelligence & Situational Awareness:

- Maintain continuous awareness of the cyber threat landscape by analyzing DoD, Intelligence Community, and open-source intelligence reporting.

- Identify new vulnerabilities, malware families, and threat actor TTPs that could impact mission-critical networks.

- Translate threat intelligence into actionable defensive measures and detection capabilities.

- Collaborate with DISA, mission partners, and Combatant Commands to enhance collective defense posture.

**What You Bring**

Required Qualifications:

- Active DoD Top-Secret Clearance.

- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or related field with 8+ years of hands-on experience (or equivalent combination of education and experience).

- DoD 8570 IAT Level II certification (Security+ CE or equivalent), CSSP-A certification required within 180 days.

- Strong programming proficiency in at least one modern language: Python, Java, Ruby, or C++.

- Proven experience developing custom malware detection capabilities.

Advanced understanding of:

- TCP/IP, network protocols, ports, and traffic flow analysis.

- System administration across multiple platforms.

- OSI model and defense-in-depth security architecture.

- Common security elements and enterprise security technologies.

- Deep knowledge of threat actor lifecycle, attack vectors, exploitation methods, and intrusion set Tactics, Techniques, and Procedures (TTPs).

- UNIX/Linux administrative skills.

Highly Desired Experience:

- Direct experience with DISA and DoD network environments.

- Proven track record countering APTs and nation-state threats targeting DoD networks.

- Advanced cybersecurity analytics development and implementation.

- DevSecOps experience developing and supporting secure development environments.

- Automation expertise using Bash, Python, PowerShell, or other scripting languages.

- Linux and Windows system administration in cloud or virtualized environments (AWS, Azure, VMware).

- API development and integration experience.

- Proficiency with security tools: Git, Sigma, Yara, Snort, Suricata.

- Hands-on malware analysis using reverse engineering techniques.

- Advanced certifications: GREM, OSCP, GCFA, CISSP, CASP, or GIAC.

## Skills

### Required
- Python
- Java
- Ruby
- C++
- TCP/IP
- network protocols
- OSI model
- UNIX/Linux administrative skills
- DoD 8570 IAT Level II certification
- CSSP-A certification
- Top-Secret Clearance

### Nice to have
- Bash
- PowerShell
- Git
- Sigma
- Yara
- Snort
- Suricata
- GREM
- OSCP
- GCFA
- CISSP
- CASP
- GIAC

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Shiloh-IL/Countermeasures-Engineer_R-00193360?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)