Cybersecurity Engineer (Multi-Cloud)

Job Description

Cybersecurity Engineer (Multi-Cloud) | Leidos

The Tone:
This is a hybrid remote role at Leidos, with preferred candidates located in Huntsville, AL. Leidos was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract. This role supports a critical mission to modernize a leading, global-scale multi-cloud environment, enhancing USAF system resiliency, security, and cost effectiveness.

The TL;DR
• Role: Full Time
• Location: Huntsville, AL (Hybrid)
• Pay: $57850–$104575 yearly
• Mission: This engineer supports the U.S. Air Force Cloud One contract by ensuring multi-cloud environments across AWS, Azure, Google, and Oracle remain secure, compliant, and authorized.
• Tech Stack: AWS, Azure, Google, Oracle, SIEM, Endpoint & Cloud Security

What You’ll Actually Do
• Oversee Cybersecurity Authorizations: Manage cybersecurity authorization services, serving as a point of contact for authorization-related aspects for assigned information systems. This includes ensuring systems are maintained according to security policies and procedures, along with ongoing compliance reporting to management.
• Detect and Respond to Incidents: Perform detection, mitigation, and response to cyber incidents using a combination of technology solutions and defined processes, ensuring security issues are addressed quickly upon discovery. This also involves collecting and analyzing intelligence to correlate adversary tactics, techniques, and procedures.
• Develop and Maintain RMF Artifacts: Support the development, updates, and maintenance of RMF authorization artifacts in accordance with DoDI 8510.01 and NIST SP 800-53, ensuring comprehensive documentation for system accreditation.
• Ensure Policy and Cloud Compliance: Assist Government ISSO/ISSMs in maintaining compliance with critical DoD directives and standards, including DoDI 8500.01 (Cybersecurity), DoDI 8510.01 (RMF), AFI 17-101 (RMF), DoD Cloud Computing SRG, DISA STIG/SRG, and CNSSI 1253. This also includes supporting compliance with SCCA and Cloud SRG requirements.
• Implement Continuous ATO and Secure Configurations: Support Continuous Authorization to Operate (cATO) within DevSecOps or cloud-based environments, integrating automated control validation, continuous monitoring, and real-time POA&M management. Additionally, support the secure configuration of AWS, Azure, Oracle, and GCP cloud environments.

The Must-Haves
• Background: Bachelor’s degree with 0–2 years of relevant experience in cybersecurity or a related field; additional years of experience may be considered in lieu of a degree.
• Experience: Ability to obtain an Interim Secret clearance to start, and a Secret clearance to maintain employment; US citizenship required; demonstrated knowledge of cloud environments (AWS, Azure, SIEM, Endpoint & Cloud Security) and incident response processes.
• Skills: CompTIA Security+ certification or equivalent (IAT-2); proficiency in performing cybersecurity authorization services and supporting RMF authorization artifact development; understanding of SCCA and Cloud SRG requirements.