Security Engineer Cybersecurity Monitor Security Clearance

Position: Security Engineer Cybersecurity Monitor with Security Clearance
R
- Description   ​ Leidos is seeking an experienced Cybersecurity Monitoring Engineer to support the Defense Manpower Data Center (DMDC)   CyberPRIMES   program. Leidos is a major partner on the contract and will provide a substantial   portion   of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC.
​ The Cybersecurity Monitoring Engineer will support enterprise cybersecurity monitoring and oversight of the tools used to protect DHRA systems and networks. This position will assess the health, configuration, coverage, connectivity, and effectiveness of cybersecurity capabilities;
identify   gaps and failures; support technical troubleshooting; and provide recommendations that improve the organization’s cybersecurity posture.
​ Work Locations:  
* Mark Center, Alexandria, Virginia
* Department of Defense Center – Monterey Bay, Seaside, California Clearance:
Active Secret security clearance required at time of consideration. U.S. Citizen is a must. ​ Mission Environment   ​ DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data.

​ The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS).
​ Cybersecurity operations within this environment depend on coordinated monitoring and oversight across DMDC cybersecurity organizations, IT operations, system owners, and external Cybersecurity Service Providers (CSSPs). The Cybersecurity Monitoring Engineer will help ensure that Government-mandated cybersecurity capabilities are deployed, functioning, connected, reporting correctly, and providing the coverage necessary to   identify   and reduce enterprise cyber risk.
​

Primary Responsibilities:

* ​ Monitor DHRA cybersecurity posture using Government-mandated and Government-provided cybersecurity tools and capabilities.
* ​ Support Tier 3 and shared Tier 2 cybersecurity monitoring and troubleshooting responsibilities in coordination with Cybersecurity Service Providers.
* ​ Validate cybersecurity tool configuration, deployment, operability, connectivity, data rollups, updates, and overall compliance with applicable DHRA, Department of Defense, and National Institute of Standards and Technology (NIST) requirements.
* ​ Assess whether required cybersecurity capabilities are deployed and   operating   across the   appropriate DHRA   systems, networks, and assets.
* ​ Compare cybersecurity-tool coverage against authoritative asset inventories to   identify   gaps, missing coverage, configuration issues, or systems that are not reporting as expected.
* ​ Identify   and report tool failures, outages, connectivity issues, data-quality problems, and other conditions that may reduce cybersecurity visibility or effectiveness.
* ​ Open, document, track, and coordinate technical tickets through resolution and support troubleshooting with system owners, IT operations, tool administrators, Cybersecurity Service Providers, and other technical organizations.
* ​ Support development and monitoring of corrective action and get-well plans for   identified   cybersecurity tool or coverage deficiencies.
* ​ Validate corrective actions and document whether   identified   deficiencies have been successfully resolved.
* ​ Develop measurable and traceable cybersecurity monitoring metrics that provide Government leadership visibility into tool health, enterprise coverage, compliance, and unresolved issues.
* ​ Analyze recurring monitoring results to   identify   trends, systemic issues, and opportunities to improve cybersecurity capabilities.
* ​ Recommend cybersecurity tool enhancements, configuration improvements, or process changes based on…