Cyber Systems Engineer

1 month ago

Arlington VA United States Leidos Inc Full time

Description

Are you a motivated cyber engineer with technical hands-on knowledge of mission focused systems? Are you an ethical hacker ready to apply your knowledge to National Security? Join us at the Leidos Innovations Center, Electronic Warfare Division, with a group of highly skilled and innovative individuals and a variety of exciting R&D programs.

As a Cyber Systems Engineer, you will be expected to "think like an adversary" and engage in threat hunting and tactical analysis of ongoing attacks to mission systems. You will perform data analysis, investigative analysis, research on existing and emerging cyber threats, and develop tools to assist the aforementioned tasks. You will be challenged to leverage your understanding of the tactics, techniques and procedures employed by advanced threats combined with intelligence from multiple sources. You will also be provided a tremendous opportunity for growth through training opportunities, conferences and collaboration with industry peers and adjacent parts of our business.

This role allows telework with the ability to perform work at the Leidos Arlington site as needed, approximately 20-50%.

Primary Responsibilities:

  • Participate in threat hunt operations using known adversary tactics, techniques, and procedures, as well as threat indicators, to detect advanced threats.

  • Leverage knowledge of cyber tactics, techniques, and procedures associated with advanced, highly dynamic threats to design and develop countermeasures to mitigate advanced threats.

  • Analyze network and host activity associated with both successful and unsuccessful intrusions by advanced threats.

  • Perform network traffic analysis of raw packet data, net flow, IDS, and custom sensor output.

  • Employ advanced forensic tools and techniques for attack detection, reconstruction, and intelligence gathering.

  • Document threats via threat intelligence reports.

  • Research emerging cyber threats. Apply analytical understanding of attack methodologies and tactics, system vulnerabilities, and key indicators of attacks and exploits.

  • Collaborate using information and knowledge sharing networks and professional relationships to achieve common goals.

Basic Qualifications:

  • BS Degree and 8+ years relevant experience in cyber security and/or network defense

  • Strong understanding of network stack/routing/interconnectivity.

  • Strong understanding of Linux/Unix-based operating systems.

  • Basic understanding of mobile operating systems, network stacks, and network app build procedures.

  • A deep understanding of advanced cyber threats targeting mission systems, along with the tools, tactics, and procedures used by those threats.

  • Experience performing intrusion analysis, digital forensics, and data correlation from multiple sources including PCAP and forensic artifacts.

  • Experience applying threat and data modeling, advanced data correlation, and statistical analysis to develop alerts, notable events, investigative dashboards, and metrics-driven reports.

  • Proficiency with Python and C++ and Linux/Unix shells.

  • Must have a Secret clearance and be able to obtain a TS/SCI.

Desired Qualifications:

  • Strong understanding of mobile operating systems, network stacks, mobile networks, and application build procedures, spanning both Android and iOS.

  • Previous experience as Threat Researcher and/or Intelligence Analyst.

  • Experience with dynamic malware analysis, and reverse engineering.

  • Experience in cryptography or cryptanalysis.

  • Understanding of behavioral based threat models, including ATT&CK, Cyber Kill Chain, Diamond Model, etc.

  • Ability to create, modify, and implement both Snort and YARA signatures.

  • Working knowledge of Computer Network Exploitation (CNE), Computer Network Attack (CNA), and Computer Network Defense (CND) tools and techniques.

  • Working knowledge of AI/Machine Learning

  • Relevant certifications such as CISSP, SANS GIAC, CEH, etc.

  • Capable and comfortable communicating actionable threat intelligence to both technical and program-level stakeholders.

  • Published research papers at conferences or through other mediums.

LInC

Electronic Warfare

Original Posting Date:2024-02-08

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:Pay Range $101,400.00 - $183,300.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

  • Cyber Network Based Systems Analyst IV

    2 months ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionArgo Cyber Systems provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based and cloud-based cybersecurity analysis capabilities. Team personnel provide front line response for digital forensics/incident...

  • Cyber Network Based Systems Analyst II

    2 months ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionThe DHS's Hunt and Incident Response Team (HIRT) secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front-line response for cyber incidents and proactively hunting for malicious cyber activity. Argo Cyber Systems supports this mission with DHS, performs HIRT investigations to develop a...

  • Cyber Network Based Systems Analyst III

    2 months ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionThe DHS's Hunt and Incident Response Team (HIRT) secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front-line response for cyber incidents and proactively hunting for malicious cyber activity. Argo Cyber Systems supports this mission with DHS, performs HIRT investigations to develop a...

  • Host Based Cyber Systems Analyst IV

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionThe DHS's Hunt and Incident Response Team (HIRT) secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front line response for cyber incidents and proactively hunting for malicious cyber activity. Argo Cyber Systems is a key partner to DHS, and performs HIRT investigations to develop a...

  • Mgr. Cyber Incident Response, Network Based Systems Analyst III

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionArgo Cyber Systems provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based and cloud-based cybersecurity analysis capabilities. Team personnel provide front line response for digital forensics/incident...

  • Systems Engineer

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionARGO Cyber Systems is seeking a Systems Engineer (Elastic) to support a critical customer mission. Responsibilities: Designs, implements, and configures Kibana visualizations Designs and configures Elasticsearch instance(s) Designs Elasticsearch indices to efficiently store data currently optimizing both performance and the need...

  • Cyber Incident Manager Level II

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionIncident Manager Level IVARGO Cyber System is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize...

  • Deputy Cyber Incident Response Team

    7 days ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionDeputy Cyber Incident Response Team (CIRT) ManagerThe Deputy Cyber Incident Response Team (CIRT) Manager ensures exceptional service for managed services customers and helps drive employee engagement for CIRT staff members. They will help coordinate the daily activities of CIRT staff; orient, train, and mentor staff; monitor...

  • Deputy Cyber Incident Response Team

    1 week ago

    Arlington, United States Argo Cyber Systems Full time

    Deputy Cyber Incident Response Team (CIRT) Manager The Deputy Cyber Incident Response Team (CIRT) Manager ensures exceptional service for managed services customers and helps drive employee engagement for CIRT staff members. They will help coordinate the daily activities of CIRT staff; orient, train, and mentor staff; monitor incident management queues;...

  • Cyber Systems Engineer with Security Clearance

    1 month ago

    Arlington, United States Leidos Full time

    R-00128607 Description Are you a motivated cyber engineer with technical hands-on knowledge of mission focused systems? Are you an ethical hacker ready to apply your knowledge to National Security? Join us at the Leidos Innovations Center, Electronic Warfare Division, with a group of highly skilled and innovative individuals and a variety of exciting R&D...

  • Principal Cloud Automation Engineer

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Principal Cloud Automation Engineer (AWS) Level 6 Job Description: Argo Cyber Systems is supporting a U.S. Government customer on a large mission-critical development and sustainment program to design, build, deliver, and operate a network operations environment including introducing new cyber capabilities to address emerging threats. Argo Cyber Systems is...

  • Principal Cloud Automation Engineer

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionPrincipal Cloud Automation Engineer (AWS) Level 6Job Description: Argo Cyber Systems is supporting a U.S. Government customer on a large mission-critical development and sustainment program to design, build, deliver, and operate a network operations environment including introducing new cyber capabilities to address emerging...

  • Sr. Cybersecurity Engineer- Tenable

    1 week ago

    Arlington, United States Cyber Crime Full time

    phia, LLC At phia, trust us to solve the complex challenges of our connected world through top-tier cyber intelligence & threat hunting. Contact us. View company page At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our...

  • Security Analyst

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionARGO Cyber Systems is seeking a Cyber Security Incident ResponderARGO is supporting a U.S. Government customer on a large mission critical development and sustainment program to design, build, deliver, and operate a network operations environment; including introducing new cyber capabilities to address emerging threats. In...

  • Principal Cloud Automation Engineer

    1 month ago

    Arlington, United States ARGO Cyber Systems, LLC Full time

    Principal Cloud Automation Engineer (AWS) Level 6 Job Description: Argo Cyber Systems is supporting a U.S. Government customer on a large mission-critical development and sustainment program to design, build, deliver, and operate a network operations environment including introducing new cyber capabilities to address emerging threats. Argo Cyber Systems is...

  • Cyber Engineer

    1 month ago

    Arlington, Virginia, United States Solutions³ LLC Full time

    Cyber Engineer - Principal I - SCE0- Full PerformanceThe successful Cyber Security Engineer applies current analytical and logical thinking to the design, architecture, development, evaluation, testing, and integration of computer systems, appliances, and networks to elevate the security posture of the program. The Cyber Security Engineer may be involved...

  • Cyber Security Engineer

    7 days ago

    Arlington, United States SecuriGence LLC Full time

    Job DescriptionJob DescriptionJob Title: Cyber Security EngineerLocation: Arlington or Oakton, Virginia.Clearance Level: Secret ClearanceSummaryWe deliver essential technology services to our customers in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking an experienced Cyber Security...

  • Cyber Engineer II

    1 month ago

    Arlington, United States Solutions3 Full time

    Cyber Engineer - Principal I - SCE05-Full Performance The successful Cyber Security Engineer applies current analytical and logical thinking to the design, architecture, development, evaluation, testing, and integration of computer systems, appliances, and networks to elevate the security posture of the program. The Cyber Security Engineer may be involved...

  • Lab Manager II

    1 month ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionLab Manager II - Technical Engagement Network (TEN)Argo Cyber Systems is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform...

  • Lab Manager II

    4 days ago

    Arlington, United States Argo Cyber Systems Full time

    Lab Manager II - Technical Engagement Network (TEN) Argo Cyber Systems is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the...