Security Engineer

Cyber Security Engineer (T4)

Location: Huntingdon, Cambridgeshire UK

Security Clearance Level: 'High' - DV Developed Vetting

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Are your ready for your next challenge?

Leidos is seeking a Cyber Security Engineer with an extensive background as an infrastructure engineer, coupled with proven skills in coding. This role is designed for an individual who is keen on leveraging their technical expertise to fortify the security framework within a dynamic environment. The role will lead initiatives to integrate security at every phase of the development lifecycle, ensuring the robustness and compliance of our applications and infrastructure. In this role, you will be working across both infrastructure and security space reporting into the System Technical Lead and the Cyber Security Engineering Lead.

Key Responsibilities:

COTS Application Updates: Support the update process for Commercial Off-The-Shelf (COTS) applications, ensuring compatibility and security.

Vulnerability Scanning: Conduct regular assessments of environments to identify vulnerabilities.

Security Definition Updates: Manage and update security definitions across our platforms to protect against emerging threats.

Vulnerability Analysis: Analyse vulnerability assessment reports and implement necessary changes.

Security Daily Checks: Perform thorough daily checks of security components to ensure operational integrity.

System Health Checks: Conduct daily system health checks to ensure servers are functioning optimally.

Capacity Checks & Reporting: Monitor and report on local system capacity, suggesting improvements where necessary.

Patching: Support application patching to resolve security issues and enhance system performance.

Log Management: Oversee log archiving and deletion processes to maintain a streamlined log management system.

Account Management: Update local admin account passwords and manage account policies to maintain security.

Resource and System Monitoring: Implement and manage resource and system monitoring tools and practices.

Backup Management: Ensure local server backups are conducted regularly and effectively.

Documentation and SOPs: Review and update engineering and design documents and standard operating procedures periodically.

Reboots and Preventative Maintenance: Schedule and execute server and application reboots as part of preventive maintenance.

Platform Health Check: Perform full audits of all technologies for interoperability and patch compliance.

PKI and Secrets Management: Oversee the daily checks of Public Key Infrastructure and manage the lifecycle of secrets securely.

Vulnerability Assessment: Execute comprehensive vulnerability scanning on all applications and lead the analysis and triage of findings.

Code Review: Review code for potential security issues prior to production releases.

Your Skills & Experience

• Infrastructure hardening/maintenance/engineering 

• Working experience in one or multiple of the following disciplines:

  • Microsoft & Linux/Unix

  • Virtualisation technologies (VMWare)

  • Endpoint Security Products (e.g. Symantec, Trellix)

  • Network Security (Firewalls)

  • Vulnerability Scanning

  • Code Analysis (Java, PowerShell etc)

Desirable Experience

• Experience working in both delivery and proposal environments.

• Experience working in MOD or Home Office project environments.

• Proven track record as a 3rd line infrastructure engineer

• Solid experience in developing and automating processes.

• Working knowledge of SecDevOps tools and methodologies.

• Excellent analytical and problem-solving skills.

• Strong communication and documentation abilities.

• Hands on experience with SIEM solutions i.e. Splunk, ArcSight, LogRhythm

Communication and Soft Skills

• Experience speaking to and working with leadership as well as ability to write reports and present in security working groups

• Excellent verbal and written communication skills and works well in a team environment

• Capable of developing and communicating reports to meet defined objectives for intended audience

• A good level of commercial awareness and project disciplines

Candidate Essentials

British - non-dual national – many of our projects have nationality restrictions

DV cleared or willing to go through DV Clearance

What we do for you:
At Leidos we are PASSIONATE about customer success, UNITED as a team and INSPIRED to make a difference. We offer meaningful and engaging careers, a collaborative culture, and support for your career goals, all while nurturing a healthy work-life balance.

We provide an employment package that attracts, develops and retains only the best in talent. Our reward scheme includes:

•    Contributory Pension Scheme

•    Private Medical Insurance

•    33 days Annual Leave (including public and privilege holidays)

•    Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays and a cycle to work scheme)

•    Access to Flexi-time benefits

Commitment to Diversity:

We welcome applications from every part of the community and are committed to a truly diverse and inclusive culture.  We foster a sense of belonging, welcoming all perspectives and contributions, and providing equal access to opportunities and resources for everyone.  If you have a disability or need any reasonable adjustments during the application and selection stages please let us know, and we will respond in a way that best fits your needs.

Who We Are:

Leidos UK & EUROPE – we work to make the world safer, healthier, and more efficient through technology, engineering and science.

Leidos is a growing company delivering innovative technology and solutions focused on safeguarding critical capabilities and transformation in frontline services, our work in the United Kingdom includes addressing some of the most complex problems in defence, healthcare, government, safety and security, and transportation.

What Makes Us Different:
Purpose: you can use your passion and abilities at Leidos to keep the people you care about safe. We are at the forefront of machine learning, AI, cyber security and solutions. Using your skills in the technology frontline by helping to build a safer world.  You can inspire change.

Collaboration: having flexibility to do your job is one of our core benefits, enabling you to become part of our extraordinary team.  We have been empowering our people to work flexibly for years.  Whether you work from home, the office or on customer sites, we will give you the digital tools and the flexibility to work smarter and align your needs and ours

People: Leidos empowers people from every background to be themselves and gives you the tools to learn new skills by enabling growth whilst developing. We believe that extraordinary people need opportunities to grow, to be inspired and to inspire others. At Leidos, we invest in technical academies, career rotations and a career development plans that enhance your future.

At Leidos, we don't want someone who "fits the mold"—we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, "what's next?" before the dust settles on "what's now."

If you're already scheming step 20 while everyone else is still debating step 2… good. You'll fit right in.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.