Network Security Tools Engineer

Network Security Tools Engineer

Location:

Suitland, MD

Clearance Required:

Active TS/SCI Leidos is seeking an experienced Network Security Tools Engineer to join our cybersecurity team in Suitland, MD. This position will support the security technologies and infrastructure that provide visibility, monitoring, detection, and protection across a mission critical enterprise environment.

In this role, you will be responsible for the administration, engineering, optimization, integration, and troubleshooting of enterprise network security tools and platforms. You will work closely with cybersecurity operations, network engineering, and other technical teams to ensure security tools remain available, properly configured, and capable of providing reliable data to support threat detection and incident response.

The ideal candidate will bring a strong combination of networking and cybersecurity experience, along with hands on experience supporting enterprise security technologies such as SIEM, IDS/IPS, firewalls, endpoint security, packet capture, and network visibility solutions.

• Deploy, configure, administer, upgrade, and maintain enterprise network security tools and platforms, including SIEM, firewalls, proxy servers, packet capture solutions, IDS/IPS, endpoint security, and network visibility technologies.
• Monitor the health, availability, performance, and data ingestion of cybersecurity tools to ensure continuous visibility across the enterprise environment.
• Troubleshoot and resolve security tool performance, connectivity, integration, configuration, and data collection issues.
• Support the integration of security technologies across enterprise networks, systems, and other cybersecurity platforms.
• Collaborate with Security Operations Center teams to optimize security tools, tune detection capabilities, reduce false positives, and improve the quality of security alerts.
• Provide technical support during cybersecurity incidents and service outages, including troubleshooting issues affecting security monitoring and data collection.
• Support the integration and automation of cybersecurity tools using scripting and orchestration technologies.
• Analyze network and security telemetry to identify gaps, performance issues, and opportunities to improve security visibility.
• Maintain accurate technical documentation, including architecture diagrams, system configurations, runbooks, standard operating procedures, and asset inventories.
• Collaborate with cybersecurity, network, systems, and engineering teams to support the continued operation and improvement of the enterprise security infrastructure.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline with 8+ years of relevant professional experience or a Master's degree with 6+ years of relevant professional experience.
• Equivalent practical experience may be considered in lieu of a degree, as permitted by contract requirements.
• Active TS/SCI security clearance in DISS.
• Hands on experience supporting information security, network administration, cybersecurity engineering, or enterprise security tools.
• Strong understanding of networking concepts and protocols, including TCP/IP, DNS, DHCP, HTTP/S, routing, and network security architecture.
• Experience administering or supporting enterprise cybersecurity technologies such as Splunk, Microsoft Sentinel, Elastic, Crowd Strike, Palo Alto Networks, Wireshark, Steel Cloud, or similar platforms.
• Experience working with network and enterprise operating systems, including Linux and Windows.
• Experience troubleshooting complex network, system, or cybersecurity tool issues.
• Ability to work effectively with technical teams in a mission…