The Cyber Security Engineer plays a crucial role in protecting IT infrastructure by using a blend of technical expertise and strategic planning to ensure that the digital infrastructure remains secure from various types of attacks and vulnerabilities. You will be responsible for planning and implementing appropriate security controls to ensure that the information within is kept secure.
Key functions/outputs:
1. Vulnerability Scanning & Reporting
2. Endpoint Security
3. Incident Management & Tickets
4. System Hardening
5. Change Work
6. Participation in Regular Meetings
7. Documentation
Main Objectives:
Vulnerability Scanning & Reporting
Perform regular vulnerability scans and generate reports utilising the below tool sets or similar. The process should be focused on ensuring that the below tool sets are kept up to date and ensure that scans are performed regularly to help assist the Vulnerability and Patch Manager with identifying weaknesses in the system.
- Code Scans: perform regular code scans to audit code quality metrics, potential bugs, and security vulnerabilities.
- Vulnerability Management Tooling: perform regular Vulnerability Management Scans and ensure that the warehouse and plugins are kept up to date to capture new vulnerabilities.
- Reporting: assist the Vulnerability and Patch Manager with generating regular vulnerability management reports, which are to be provided to the cyber security and IA lead.
Endpoint Security:
- Endpoint Protection: perform regular updates to Endpoints to ensure the latest packages are applied and policies are amended to keep up to date with new and emerging threats.
- Antivirus and Anti-malware Protection: perform compliance checks to ensure that antivirus and anti-malware protection is deployed successfully and being kept up to date by the relevant team.
- Network Controls: perform compliance checks and regular audits of network controls (i.e. firewall rules) to ensure that unauthorised access and threats are being blocked.
- Access Control: ensuring that access controls have been implemented correctly to only allow authorised users to gain access to certain data and systems.
Incident Management & Tickets:
- Incident Identification: help to recognise and confirm potential incidents through alerts, logs and user reports. This includes distinguishing between true threats and false positives.
- Incident Response: respond to potential security breaches or cyber-attacks. The main effort should focus on containment, mitigating the damage, investigation of the root cause of the incident and restoring to normal operations.
- Ticket Requests: respond to and resolve any tickets raised to the Leidos Security group on SD+ that require Cyber Security Engineering input.
System Hardening:
- Patch Updates to Security Products: ensure that the security tool sets are kept up to date with regular security patches and software updates to fix vulnerabilities and improve system security.
- System Compliance: perform regular system compliance audits and updates to ensure that the systems are compliant with industry best practices. This includes CIS, STIG, NIST etc.
- Security Enforcing Function Configuration: Assist in the design, reviews and updates to security enforcing functions (i.e. GPOs or System Policies) and system controls to ensure that they are compliant and fit for purpose.
- Vulnerability Assessments: conduct periodic assessments to identify and address potential vulnerabilities.
Change Work:
- Security Impact Triage Tool (SITT): Assist in evaluation and impact assessment of system change to security posture of the environments.
- Security Evaluation, Testing and Assurance (ST&V): perform Security, Evaluation, Testing and Assurance activities for any new changes that are planned in as part of PI Planning.
Participation in Regular Meetings:
Cyber Security Engineers are expected to lead or attend numerous meetings that require their input. This may include the following depending on work activity.
- Security Working Group (SWG
- Vulnerability Triage
- Security Workshop
- PI Planning
- Daily Standups (Blue/Green Team)
Documentation:
Cyber Security Engineers are responsible for creating, maintaining and reviewing detailed documentation. This includes High-Level & Low-Level Designs (HLD/LLD), Standard Operating Procedures (SOP) and compliance reports, and other ad-hoc security documentation, etc.
- Proven experience in a cyber security engineering role, delivering security outcomes across IT environments (on-prem and/or cloud).
- Practical experience implementing security tooling and Security policies.
- Demonstratable knowledge of secure configuration and hardening practices, and ability to apply benchmarks/standards (e.g., CIS, NIST, STIG) pragmatically.
- Hands-on experience with vulnerability management and risk-based prioritisation, including working with engineering teams to drive remediation.
- Experience supporting incident response activities, including investigation, containment, and lessons learned.
- Ability to communicate technical security issues clearly to non-specialists and support governance/assurance decision-making.
- Experience producing quality security documentation and evidence suitable for audit/assurance.
- AWS security-related certifications (e.g., AWS Certified Security – Specialty) or equivalent cloud security experience.
- CISSP
- Degree or postgraduate qualification in cyber security, such as a master’s or PhD in Information Security, Cyber Security, or a related discipline.
- Clearance to Start SC
- Clearance for Role DV
Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your CV with us today!
What we do for you:
At Leidos we are PASSIONATE about customer success, UNITED as a team and INSPIRED to make a difference. We offer meaningful and engaging careers, a collaborative culture, and support for your career goals, all while nurturing a healthy work-life balance.
We provide an employment package that attracts, develops and retains only the best in talent. Our reward scheme includes:
Contributory Pension Scheme
Private Medical Insurance
33 days Annual Leave (including public and privilege holidays)
Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays and a cycle to work scheme)
Flexi-Time
Commitment to Diversity:
We welcome applications from every part of the community and are committed to a truly diverse and inclusive culture. We foster a sense of belonging, welcoming all perspectives and contributions, and providing equal access to opportunities and resources for everyone. If you have a disability or need any reasonable adjustments during the application and selection stages please let us know, and we will respond in a way that best fits your needs.
