Cybersecurity Engineer – Product Development Lead

Leidos is hiring a Cybersecurity Engineer-Product Development to support end-to-end development, integration, testing, production, delivery, and sustainment of defense systems and software.

Responsibilities

• Support the system lifecycle from initial requirements and architecture through design, implementation, integration, cybersecurity assessment, qualification, production readiness, fielding, and sustainment
• Identify applicable cybersecurity requirements from DoD policies, NIST publications, DFARS clauses, CMMC requirements, RMF controls, Security Technical Implementation Guides (STIGs), program protection requirements, Supply Chain Risk Management (SCRM), and customer-specific security needs
• Assist Systems Engineering with establishing system security boundaries, trust boundaries, information flows, external interfaces, and cybersecurity assumptions and constraints
• Participate in system and software architecture development and design reviews
• Evaluate system architecture for cybersecurity weaknesses and recommend practical risk-reduction measures
• Provide cybersecurity engineering guidance across authentication, authorization, least privilege, encryption, key management, logging, auditing, secure communications, interface protection, network segmentation, and data protection
• Perform or coordinate vulnerability assessments using approved capabilities, including tools such as ACAS/Nessus, SCAP/STIG assessment tools, SAST/SCA platforms, and network analysis tools
• Develop remediation recommendations in coordination with engineering teams
• Support preparation and maintenance of RMF artifacts, including system diagrams, data-flow diagrams, hardware/software inventories, ports/protocols/services information, security assessment results, vulnerability records, and Plans of Action and Milestones (POA&Ms)
• Support IATT, ATO, Assess-Only, or other authorization/assessment approaches as applicable to the program
• Ensure authorization documentation reflects the actual engineered and production system rather than treating RMF documentation as a separate compliance activity

Requirements

• Bachelor’s degree in a related technical discipline (Cybersecurity, Computer Science, Computer Engineering, Software Engineering, Systems Engineering, Electrical Engineering, Information Technology, or similar), plus 8 years of cybersecurity engineering experience
• In lieu of a degree: combination of education, military experience, and directly applicable engineering experience plus 11 years may be considered
• Experience supporting cybersecurity for software-intensive or defense systems from development through test, production, and fielding (strongly preferred)
• Strong understanding of secure system and software engineering principles
• Working knowledge of NIST SP 800-53, NIST SP 800-37 RMF, NIST SP 800-171, NIST SP 800-218 SSDF, and applicable DoD cybersecurity requirements
• Understanding of DoD RMF processes and security control implementation
• Experience developing cybersecurity requirements and verification criteria
• Ability to translate cybersecurity requirements into language understandable to engineering, manufacturing, test, and program personnel
• Experience with cybersecurity risk assessment and vulnerability management
• Knowledge of secure software architecture and secure coding concepts
• Understanding of Linux security and system hardening
• Experience with vulnerability assessment technologies such as ACAS, Nessus, SCAP/STIG tools, or equivalent platforms
• Familiarity with SAST, DAST, SCA, dependency scanning, secrets scanning, and software supply-chain security
• Security+ or CISSP
• US citizenship required; ability to obtain and maintain an active secret clearance required
• Must be a resident of Huntsville, AL or willing to relocate to the Huntsville, AL area

Technologies

• ACAS
• Nessus
• SCAP/STIG assessment tools
• SAST/SCA platforms
• Network analysis tools
• SAST
• DAST
• SCA
• Dependency scanning
• Secrets scanning
• Linux

Benefits

• Health and Wellness programs
• Income Protection
• Paid Leave and Retirement

Job Details

• Location: Huntsville, AL (onsite)
• Salary Range: USD 107,900 - 195,050 (yearly)
• Original Posting Date: November 10, 2026
• Clearance: Active secret clearance required (obtain and maintain)
• Posting Duration (U.S.): Expected to remain open for at least 3 days; close date no earlier than 3 days after the original posting date

Pay range note: Leidos pay range is a general guideline only and not a guarantee of compensation or salary.