Cyber Security Engineer

OverviewCyber Security Engineer (DevSecOps) – Location: Huntingdon, Cambridgeshire, UK. Security Clearance Level: High - DV Developed Vetting. At Leidos we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers" success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people and our community.Are you ready for your next challenge? We are in search of multiple Cyber Security Engineers with varying technical backgrounds. You will be required to work at our customer site in Huntingdon, Cambridgeshire with occasional travel to other UK sites. You will work within a team of engineers to ensure that customer sites maintain a strong cyber security posture. Cyber Security Engineers are responsible for providing cybersecurity engineering services for classified and unclassified networks of computer systems. The Cyber Security Engineers will provide operational and engineering support.ResponsibilitiesDevelop creative solutions to complex technical issues and problemsWork with engineering teams to ensure systems remain at the required security posture against baseline requirementsCollaborate with the Security Monitoring engineering team to ensure logs are forwarded to the SIEM capabilityWork with the customer and appropriate agencies to develop new policies, design processes and procedures, and develop technical designsAssess system vulnerabilities, implement risk mitigation strategies, validate secure systems, and test security products and systems to detect security weaknessesMaintain and support security enforcing functionsCore SkillsExperience working in MOD or Home Office project environmentsStrong knowledge of network and system security including firewalls, IDS/IPS, micro-segmentation and host securityHands-on experience with security products Trellix, Ivanti, ClearSwift, YubikeyUnderstanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25)Expertise in identity and access management (IAM) including RBAC, ABAC, JWT and cookie-based authenticationIncident detection and response in MOD environmentsSecurity compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks)Experience working with Kubernetes at an administrative levelSoft SkillsStrong leadership and mentoring abilitiesEffective communication with development, operations and security teamsAbility to advocate for security best practices in a DevOps cultureDesirable SkillsContainerisation SecurityExpertise in Kubernetes security (RBAC, network policies, pod security standards, secrets management)Knowledge of container runtime security (container escapes, rootless containers, sandboxing)Image security best practices including scanning, signing and provenance verificationSecure deployment patterns using Tanzu & KubernetesRuntime security monitoringDevSecOps & CI / CD SecuritySecure CI/CD pipeline design with security testing using Git and SonarQubeImplementation of Infrastructure as Code (IaC) security (e.g., Terraform, Ansible)Secrets management in CI/CD pipelines using Vault or Kubernetes SecretsSecurity automation and policy enforcement using tools like GitHub Actions, GitLab CI and JenkinsCloud & Infrastructure SecurityStrong knowledge of cloud security principles in a containerised environmentKubernetes security posture management (KSPM) using tools like TrivySecure ingress/egress controls, service mesh security (ISTIO)Encryption strategies for data at rest, in transit and in useNetwork security best practices for Tanzu container networking (e.g., NSX, Rancher)Compliance monitoring and security auditing for cloud-native environmentsAutomation & ScriptingScripting skills in Python, PowerShell for security automationAPI security knowledge (OAuth, JWT, API gateways, rate limiting)Experience with Security as Code for automated policy enforcementCandidate EssentialsBritish - non-dual national; many projects have nationality restrictionsDV cleared or willing to go through DV Clearance. Experience in delivering accredited security solutions in sensitive government scenariosWhat we do for youAt Leidos we are passionate about customer success, united as a team and inspired to make a difference. We offer meaningful and engaging careers, a collaborative culture and support for your career goals, while nurturing a healthy work-life balance.We provide an employment package that attracts, develops and retains the best in talent. Our reward scheme includes:Contributory Pension SchemePrivate Medical Insurance33 days Annual Leave (including public and privilege holidays)Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays, and a cycle to work scheme)Access to Flexi-time benefitsCommitment to DiversityWe welcome applications from every part of the community and are committed to a diverse and inclusive culture. We foster a sense of belonging, welcoming all perspectives and contributions and providing equal access to opportunities and resources for everyone. If you have a disability or need any reasonable adjustments during the application and selection stages, please let us know and we will respond in a way that best fits your needs.Who We AreLeidos UK & EUROPE work to make the world safer, healthier and more efficient through technology, engineering and science. We are a growing company delivering innovative technology and solutions focused on safeguarding critical capabilities and transformation in frontline services; our work in the United Kingdom includes addressing complex problems in defence, healthcare, government, safety and security, and transportation.What Makes Us DifferentPurpose: You can use your passion and abilities at Leidos to keep the people you care about safe. We are at the forefront of machine learning, AI, cyber security and solutions. Use your skills to help build a safer world. You can inspire change.Collaboration: Flexibility to do your job is a core benefit, enabling you to become part of our extraordinary team. We have been empowering our people to work flexibly for years. Whether you work from home, the office, or on customer sites, we will provide the tools and flexibility to work smarter and align our needs with yours.People: Leidos empowers people from every background to be themselves and gives you the tools to learn new skills by enabling growth, while developing. We invest in technical academies, career rotations and career development plans that enhance your future.At Leidos we don’t want someone who fits the mold—we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask what’s next before the dust settles on what’s now.If you’re already scheming step 20 while everyone else is still debating step 2, you’ll fit right in.Original PostingFor U.S. Positions: Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date no earlier than 3 days after the original posting date.Pay Range: 60100.00-77000.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Other factors may be considered in offers (e.g., responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data, bargaining agreements).Key SkillsSplunk, IDS, Network security, Computer Networking, Identity & Access Management, PKI, PCI, NIST Standards, Security System Experience, Information Security, Encryption, SIEMEmployment TypeFull-TimeExperienceyearsVacancy1 #J-18808-Ljbffr