Cyber Security Engineer

Cyber Security Engineer

UNLEASH YOUR POTENTIAL

The UK National Security, Defence and Intelligence Sector at Leidos currently has an opening for a Cyber Security Engineer to support delivery of a government contract.

This is an embedded security engineering delivery role. You will work as part of the engineering team to build, configure, integrate, operate and improve security controls used by services across Azure, hybrid environment. Working with guidance from senior engineers and architects where needed, you will take defined changes through build, deployment, test and operational support.

You will deliver security capabilities alongside cloud, platform, network, application and DevOps engineers, including Azure controls, identity and access controls, GitHub and JFrog security integrations, pipeline guardrails, security monitoring and vulnerability remediation. You will also contribute to low-level designs, assurance evidence and technical documentation, building your architecture and assurance knowledge through practical implementation.

Primary Responsibilities

Deliver assigned security controls as an embedded member of the engineering team, supporting build, configuration, deployment, testing, operation and continuous improvement

Configure and maintain Azure security controls, including Azure Policy, Network Security Groups, private endpoints, Key Vault, Defender for Cloud, Azure Monitor, Log Analytics, workload protection and landing-zone controls

Implement and maintain identity and authorisation controls using Microsoft Entra ID, role-based access control (RBAC), attribute-based access control (ABAC), managed identities, service principals, Conditional Access and least-privilege principles

Configure security controls within GitHub and JFrog workflows, including repository and branch protections, package and artefact controls, and code, dependency, secret, container and artefact scanning

Support security controls in CI/CD pipelines using GitHub Actions and associated tooling, including policy checks, software composition analysis, static and dynamic testing, infrastructure scanning and approval gates

Develop and maintain security automation using infrastructure as code, policy as code, scripting and APIs, following established engineering standards and review processes

Work with software, platform, cloud, network and service engineers to integrate security controls, resolve implementation issues and address security defects before release

Support security technologies in service through configuration, health monitoring, upgrades, rule and policy tuning, incident support and routine lifecycle activities

Triage vulnerability findings, implement agreed remediation, update delivery backlogs and support retesting and closure

Configure security telemetry, alerts and integrations across Azure, applications, pipelines and engineering tooling, and assist with investigation and corrective action

Contribute to and maintain low-level design content, secure build standards, configuration baselines, test plans, runbooks and implementation evidence with review from senior colleagues

Contribute to threat modelling, data-flow reviews, control selection and secure integration patterns, and help validate that agreed controls work as intended

Support technical assurance by collecting implementation evidence, completing control checks and addressing review findings

Share knowledge with colleagues, contribute to reusable security components and suggest improvements to engineering practices

Basic Qualifications

Practical experience supporting or delivering cyber security controls within a cloud platform or service engineering team

Working knowledge of security controls in cloud or hybrid environments, such as identity, networking, workloads, secrets and keys, policy, monitoring or security posture management

Some practical experience with Microsoft Azure or an equivalent cloud platform and an understanding of cloud security

Understanding of RBAC, ABAC, least privilege, managed identities, service principals or privileged access, with experience implementing at least some of these controls

Exposure to GitHub, JFrog, SonarQube or equivalent source-code, CI/CD and artefact platforms, including security scanning or repository controls

Some experience with automation, infrastructure as code, policy as code, scripting or APIs, or a willingness to develop these skills

Experience supporting technology in production, including monitoring, troubleshooting, controlled change or incident support

Ability to analyse vulnerability or security findings, implement defined remediation and provide evidence of completion

Ability to create clear technical documentation such as configuration records, implementation plans, test results and operating procedures

Ability to work independently on defined tasks, seek guidance appropriately and collaborate with software, cloud, platform, network, operations and assurance colleagues

Willingness and ability to obtain and maintain the security clearance required for the role

Preferred Qualifications

Experience supporting security engineering within policing, central government, national security, defence or another regulated environment

Practical exposure to Azure Policy, Defender for Cloud, Azure Monitor, Log Analytics, Key Vault, Private Link, Network Security Groups or equivalent cloud-native technologies

Practical exposure to GitHub Enterprise, GitHub Actions, GitHub Advanced Security, JFrog Artifactory, JFrog Xray or comparable DevSecOps platforms

Exposure to cloud-native identity, workload, container, software-supply-chain, vulnerability-management or security-monitoring controls

Experience with Terraform, Bicep, PowerShell, Azure CLI or similar automation and infrastructure-as-code technologies

Awareness of security architecture and assurance methods, including threat modelling, secure design reviews and control assessment

A relevant technical, cloud or cyber security certification, or equivalent practical learning, such as Microsoft Azure Security Engineer, AWS security training, GitHub Advanced Security or CompTIA Security+

What we do for you:

At Leidos we are PASSIONATE about customer success, UNITED as a team and INSPIRED to make a difference. We offer meaningful and engaging careers, a collaborative culture, and support for your career goals, all while nurturing a healthy work-life balance.

We provide an employment package that attracts, develops and retains only the best in talent. Our reward scheme includes:

Contributory Pension Scheme

Private Medical Insurance

33 days Annual Leave (including public and privilege holidays)

Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays and a cycle to work scheme)

Flexi-TIme

Commitment to Diversity:

We welcome applications from every part of the community and are committed to a truly diverse and inclusive culture. We foster a sense of belonging, welcoming all perspectives and contributions, and providing equal access to opportunities and resources for everyone. If you have a disability or need any reasonable adjustments during the application and selection stages please let us know, and we will respond in a way that best fits your needs.

Who We Are:

Leidos UK & EUROPE – we work to make the world safer, healthier, and more efficient through technology, engineering and science.

Leidos is a growing company delivering innovative technology and solutions focused on safeguarding critical capabilities and transformation in frontline services, our work in the United Kingdom includes addressing some of the most complex problems in defence, healthcare, government, safety and security, and transportation.

What Makes Us Different:

Purpose: you can use your passion and abilities at Leidos to keep the people you care about s