Countermeasures Engineer

This position will support the DISA DECO Task Order 22 Network Assurance (NA) Program to refine and maintain the defense of Cross Domain Enterprise Services (CDES) infrastructure. This candidate will be expected to actively engage with a variety of customers, collaborating with them, anticipating their needs, and delivering flawlessly. Candidate should demonstrate a strong understanding of Cybersecurity fundamentals, threat actor TTP frameworks such as the MITRE ATT&CK framework, developing and deploying Cybersecurity threat detection and mitigation rules and analytics, and developing new and innovative solutions to defend customer networks in accordance with industry and government standards.

PRIMARY RESPONSIBILITIES:

• Establish baseline security relevant data in accordance with NSA National Cross Domain Services Management Office (NCDSMO) Raise the Bar (RTB) standards.
• Maintain integrity and efficacy of customer configurations; establish baseline customer configuration as  part of onboarding; work with the customer to track changes to the infrastructure.
• Work with the various primary monitoring centers to validate access to data and CDES index/indices with a SIEM.
• Collaborate with other teams to apply threat intelligence to the development of analytics and countermeasures; develop analytics and countermeasures.
• Track and make recommendations for RTB compliance by DISA and mission partners.
• Keep abreast of the RTB standards; work with the DISA CDES office and NCDSMO to understand changes to the standards; determine changes needed by DISA CSSP to assist with compliance.
• Work with peer teams to establish data health/monitoring dashboards.

BASIC QUALIFICATIONS:

• Must have an active DoD Secret security clearance or higher (program can support up to TS)
• Bachelor's degree from an accredited college in a related discipline with 4+ yrs of professional experience; additional or equivalent experience can be substituted in lieu of a degree.
• Knowledge of Cyber Network Defense (CND) with regards to protect, detect, respond and sustain within a Computer Incident Response organization. 
• Must be able to work independently in a high visibility, frequently changing environment.
• Understanding of enclave-level networking and sensor technologies.
• Understanding of Endpoint Detect and Response (EDR) technologies.
• Must have an active DoD-8570 IAT Level 2 baseline certification (Security+ CE) at your start date.
• Motivated self-starter with strong written and verbal communication skills. 

PREFERRED QUALIFICATIONS:

• Experience with DISA and DoD Networks.
• User-level experience with Microsoft SharePoint.
• Privileged-user level experience with Microsoft Azure and the Microsoft Defender Suite of tools.
• Microsoft AZ-104, AZ-500, and SC-200 certifications, or other Microsoft Azure and Defender-related certifications.
• Experience developing scripts in Python and PowerShell.
• Advanced Certifications such as SANS GIAC/GCIA/GCIH, CISSP, CCNA, CCNP or CASP.
• Experience in intelligence driven defense.
• Experience with DOD accreditation.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.