Senior or Lead Cyber Security Engineer

Senior Cyber Security Engineer

Location:

F/T Onsite to Farnborough, UK

Clearance Level: High
- Developed Vetting (DV)

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Leidos is seeking a Cyber Security Engineer with an extensive background as an infrastructure engineer, coupled with proven skills in coding. This role is designed for an individual who is keen on leveraging their technical expertise to fortify the security framework within a dynamic environment. The role will lead initiatives to integrate security at every phase of the development lifecycle, ensuring the robustness and compliance of our applications and infrastructure.

In this role, you will be working across both infrastructure and security space reporting into the System Technical Lead and the Cyber Security Engineering Lead.

• COTS Application Updates: Support the update process for Commercial Off-The-Shelf (COTS) applications, ensuring compatibility and security.
• Vulnerability Scanning: Conduct regular assessments of environments to identify vulnerabilities.
• Security Definition Updates: Manage and update security definitions across our platforms to protect against emerging threats.
• Vulnerability Analysis: Analyse vulnerability assessment reports and implement necessary changes.
• Security Daily Checks: Perform thorough daily checks of security components to ensure operational integrity.
• System Health Checks: Conduct daily system health checks to ensure servers are functioning optimally.
• Capacity Checks & Reporting: Monitor and report on local system capacity, suggesting improvements where necessary.
• Patching: Support application patching to resolve security issues and enhance system performance.
• Log Management: Oversee log archiving and deletion processes to maintain a streamlined log management system.
• Account Management: Update local admin account passwords and manage account policies to maintain security.
• Resource and System Monitoring: Implement and manage resource and system monitoring tools and practices.
• Backup Management: Ensure local server backups are conducted regularly and effectively.
• Documentation and SOPs: Review and update engineering and design documents and standard operating procedures periodically.
• Reboots and Preventative Maintenance: Schedule and execute server and application reboots as part of preventive maintenance.
• Platform Health Check: Perform full audits of all technologies for interoperability and patch compliance.
• PKI and Secrets Management: Oversee the daily checks of Public Key Infrastructure and manage the lifecycle of secrets securely.
• Vulnerability Assessment: Execute comprehensive vulnerability scanning on all applications and lead the analysis and triage of findings.
• Code Review: Review code for potential security issues prior to production releases.

• Infrastructure hardening/maintenance/engineering
• Working experience in one or multiple of the following disciplines:
  • Microsoft & Linux/Unix
  • Virtualisation technologies (VMWare)
  • Endpoint Security Products (e.g. Symantec, Trellix)
  • Network Security (Firewalls)
  • Vulnerability Scanning
  • Code Analysis (Java, Power Shell etc)

• Experience working in both delivery and proposal environments.
• Experience working in MOD or Home Office project environments.
• Proven track record as a 3rd line infrastructure engineer
• Solid experience in developing and automating processes.
• Working knowledge of Sec Dev Ops  tools and methodologies.
• Excellent analytical and problem-solving skills.
• Strong communication and documentation abilities.
• Hands on experience with SIEM solutions i.e. Splunk, Arc Sight, Log Rhythm

• Experience speaking to and working with leadership as well as ability to write reports and present in security…