Cybersecurity Engineer

Leidos was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract, and is currently seeking a Cybersecurity Engineer across AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness. 

Location:  

 This position will be hybrid remote. Candidates will be required to work onsite as needed. Preferred candidates will be located near Hanscom AFB (Boston, MA) or work in Huntsville, AL. 

Primary Responsibilities: 

The Cybersecurity Engineer will perform cybersecurity authorization services, including acting as a point of contact cybersecurity authorization related aspects to the assigned information systems, ensuring systems are maintained per security policies and procedures and maintaining compliance and ongoing reporting to management. Responsibilities include: 

• Manage and optimize AWS, Azure, Google, and/or Oracle environments 

• Configure and troubleshoot cloud, virtual, and physical hardware and software systems 

• Perform cybersecurity vulnerability scans and address findings 

• Conduct Information Assurance Vulnerability Management Monitoring and Response activities, to include development and production of all necessary documentation to support these activities 

• Report and provide mitigations with applicable Information Assurance Vulnerability Alerts (IAVAs) 

• Ensure that data-at-rest and data-in-transit is encrypted utilizing NSA-approved cryptography 

• Implement and maintain administrative, technical, and physical safeguards and controls with the security level and services required in accordance with the DoD SRG and document in the Contractor’s System Security Plan 

• Provide and execute a plan for vulnerability and compliance scanning  

• Develop and maintain Identity & Access Management systems architecture and standards for delivering enterprise-wide Identity, Access, Directory and Authentication Services for employees, vendors and members with the capability to support cloud services of varying types.  

• Participate and support information security policies and relevant compliance requirement activities with respect to cloud deployments.  

• Support the design and engineer enterprise deployment of identity governance and administration tools and products for cloud related projects and programs. 

• Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations. 

• Verify patch compliance using the approved technical solution  

• Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components. 

• Participate in regular briefings with the customer on cybersecurity status, including preparing