Security Engineer Cybersecurity Monitor

About this role

​ Leidos is seeking an experienced Cybersecurity Monitoring Engineer to support the Defense Manpower Data Center (DMDC)   CyberPRIMES   program . Leidos is a major partner on the contract and will provide a substantial   portion   of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC.   ​ The Cybersecurity Monitoring Engineer will support enterprise cybersecurity monitoring and oversight of the tools used to protect DHRA systems and networks. This position will assess the health, configuration, coverage, connectivity, and effectiveness of cybersecurity capabilities;   identify   gaps and failures; support technical troubleshooting; and provide recommendations that improve the organization’s cybersecurity posture.   ​ Work Locations:  • Mark Center, Alexandria, Virginia

• Department of Defense Center – Monterey Bay, Seaside, California

Clearance: Active Secret security clearance required at time of consideration. U.S. Citizen is a must.

​ Mission Environment  

​ DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. ​ The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS).   ​ Cybersecurity operations within this environment depend on coordinated monitoring and oversight across DMDC cybersecurity organizations, IT operations, system owners, and external Cybersecurity Service Providers (CSSPs). The Cybersecurity Monitoring Engineer will help ensure that Government-mandated cybersecurity capabilities are deployed, functioning, connected, reporting correctly, and providing the coverage necessary to   identify   and reduce enterprise cyber risk.  

​ Primary Responsibilities:

• ​ Monitor DHRA cybersecurity posture using Government-mandated and Government-provided cybersecurity tools and capabilities.  

• ​ Support Tier 3 and shared Tier 2 cybersecurity monitoring and troubleshooting responsibilities in coordination with Cybersecurity Service Providers.  

• ​ Validate cybersecurity tool configuration, deployment, operability, connectivity, data rollups, updates, and overall compliance with applicable DHRA, Department of Defense, and National Institute of Standards and Technology (NIST) requirements.  

• ​ Assess whether required cybersecurity capabilities are deployed and   operating   across the   appropriate DHRA   systems, networks, and assets.  

• ​ Compare cybersecurity-tool coverage against authoritative asset inventories to   identify   gaps, missing coverage, configuration issues, or systems that are not reporting as expected.  

• ​ Identify   and report tool failures, outages, connectivity issues, data-quality problems, and other conditions that may reduce cybersecurity visibility or effectiveness.  

• ​ Open, document, track, and coordinate technical tickets through resolution and support troubleshooting with system owners, IT operations, tool administrators, Cybersecurity Service Providers, and other technical organizations.  

• ​ Support development and monitoring of corrective action and get-well plans for   identified   cybersecurity tool or coverage deficiencies.  

• ​ Validate corrective actions and document whether   identified   deficiencies have been successfully resolved.  

• ​ Develop measurable and traceable cybersecurity monitoring metrics that provide Government leadership visibility into tool health, enterprise coverage, compliance, and unresolved issues.  

• ​ Analyze recurring monitoring results to   identify   trends, systemic issues, and opportunities to improve cybersecurity capabilities.  

• ​ Recommend cybersecurity tool enhancements, configuration improvements, or process changes based on monitoring results and   identified   operational gaps.  

• ​ Document approved baseline changes and   maintain   cybersecurity monitoring tactics, techniques, and procedures (TTPs).  

• ​ Support security scanning, mitigation activities, compliance cross-checking, and cybersecurity-system troubleshooting.  

• ​ Review technical work products and monitoring results for accuracy, completeness, and compliance with established cybersecurity standards and requirements.  

​ Basic Qualifications:

• ​ Bachelor of Science degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical discipline with 4 or more years of relevant professional experience.   Specific experience, education and training may be considered in lieu of degree.

• ​ Experience supporting cybersecurity monitoring, security engineering, cybersecurity operations, or enterprise security-tool environments.  

• ​ Experience evaluating the configuration, connectivity, availability, coverage, or operational status of cybersecurity tools and capabilities.  

• ​ Experience   identifying   technical issues and working across multiple organizations to troubleshoot and resolve cybersecurity-tool or infrastructure problems.  

• ​ Experience reviewing cybersecurity findings, system status, or technical data to   identify   deficiencies and recommend corrective actions.  

• ​ Working knowledge of Department of Defense cybersecurity requirements, NIST security guidance, or comparable Federal cybersecurity standards.  

• ​ Ability to develop and   maintain   technical procedures, monitoring documentation, metrics, and status reporting.  

• ​ Ability to communicate technical issues clearly to Government, engineering, cybersecurity, and IT operations stakeholder

Similar jobs

• Security Engineer — Baseten · San Francisco
• Security Engineer — Chainguard · Remote
• Security Engineer — Artemis · New York City
• Security Engineer — Fanduel · New York City
• Security Engineer — Fanduel · Atlanta, Georgia, United States
• Security Engineer — Sazabi · San Francisco
• Security Engineer — Nooks · San Francisco
• Security Engineer — Generalmatter · Los Angeles, CA