Leidos
Lead Cyber Infrastructure Engineer
Leidos, Denver, Colorado, United States, 80285
Primary ResponsibilitiesProvide expert technical support for Linux based Intrusion Detection Systems (IDS) and other devices that impact network security monitoring.Lead systems engineering efforts in system development or enhancements, ensuring engineering and configuration management align with organizational standards.Design, install, and maintain network IDS systems, coordinating their use across diverse environments.Monitor and collaborate in a team-oriented, technical environment to maintain a strong, cohesive work atmosphere.Identify gaps in security capabilities and visibility, proposing and implementing effective solutions.Ensure Information Assurance Vulnerability Management (IAVM) compliance for all security-related devices.Drive the achievement of key objectives and deliverables in assigned projects or programs.Actively mentor junior engineering staff, promoting adherence to industry best practices.Coordinate with change and control boards, providing comprehensive documentation for infrastructure upgrades, lifecycle replacements, and new technology implementations.Manage SIEM user accounts, including the implementation of soft certificates and ensuring secure access.Develop and validate functional requirements with end-users, coordinating systematic enhancements with support teams.Promote and lead initiatives in automation and process optimization, driving research and implementation of efficiency improvements.Basic QualificationsBachelor's degree with 8+ years of prior relevant experience or Master's degree with 6+ years of prior relevant experience.Proficiency in Linux command-line interfaces and scripting in Python, Bash, PowerShell, or similar languages for daily tasks and configuration management.Experience in containerization, orchestration, and deployment using Docker in a Linux environment.Strong background in automation and configuration management using Ansible in Linux systems.In-depth knowledge of computer security principles, DoD security protocols, and current and emerging cybersecurity technologies.Understanding of network topologies, including transport and IP, with the ability to interpret and create network topology and rack elevation diagrams.Familiarity with security policies, vulnerability management, and DoD 8570 IAT-II and CSSP-Infrastructure Support certifications (required prior to starting).Hands-on experience with change control processes and a track record of effective troubleshooting and analytical problem-solving.Excellent communication skills, capable of delivering technical information and creating detailed technical reports on findings.Must possess strong project, technical, interpersonal, and presentation skills.Available for on-call support as needed.Preferred QualificationsRed Hat Enterprise Linux Certified Engineer (RHCE) certification.Proficiency with the ELK stack and Bro/Zeek for enhanced security monitoring and data analysis.In-depth knowledge of core cybersecurity technologies, along with awareness of emerging capabilities.Proven experience in researching and implementing new, innovative technologies.Strong understanding of the cybersecurity threat lifecycle, including attacks, attack vectors, exploitation methods, and intrusion tactics, techniques, and procedures (TTPs).Highly motivated self-starter with excellent written and verbal communication skills, capable of producing comprehensive technical reports and analytical findings.