Cyber Security Engineer

Cyber Security Engineer

UNLEASH YOUR POTENTIAL

The UK National Security, Defence and Intelligence Sector at Leidos currently has an opening for a Cyber Security Engineer to support delivery of a government contract.

This is an embedded security engineering delivery role. You will work as part of the engineering team to build, configure, integrate, operate and improve security controls used by services across Azure, hybrid environment. Working with guidance from senior engineers and architects where needed, you will take defined changes through build, deployment, test and operational support.

You will deliver security capabilities alongside cloud, platform, network, application and DevOps engineers, including Azure controls, identity and access controls, GitHub and JFrog security integrations, pipeline guardrails, security monitoring and vulnerability remediation. You will also contribute to low-level designs, assurance evidence and technical documentation, building your architecture and assurance knowledge through practical implementation.

Primary Responsibilities

• Deliver assigned security controls as an embedded member of the engineering team, supporting build, configuration, deployment, testing, operation and continuous improvement

• Configure and maintain Azure security controls, including Azure Policy, Network Security Groups, private endpoints, Key Vault, Defender for Cloud, Azure Monitor, Log Analytics, workload protection and landing-zone controls

• Implement and maintain identity and authorisation controls using Microsoft Entra ID, role-based access control (RBAC), attribute-based access control (ABAC), managed identities, service principals, Conditional Access and least-privilege principles

• Configure security controls within GitHub and JFrog workflows, including repository and branch protections, package and artefact controls, and code, dependency, secret, container and artefact scanning

• Support security controls in CI/CD pipelines using GitHub Actions and associated tooling, including policy checks, software composition analysis, static and dynamic testing, infrastructure scanning and approval gates

• Develop and maintain security automation using infrastructure as code, policy as code, scripting and APIs, following established engineering standards and review processes

• Work with software, platform, cloud, network and service engineers to integrate security controls, resolve implementation issues and address security defects before release

• Support security technologies in service through configuration, health monitoring, upgrades, rule and policy tuning, incident support and routine lifecycle activities

• Triage vulnerability findings, implement agreed remediation, update delivery backlogs and support retesting and closure

• Configure security telemetry, alerts and integrations across Azure, applications, pipelines and engineering tooling, and assist with investigation and corrective action

• Contribute to and maintain low-level design content, secure build standards, configuration baselines, test plans, runbooks and implementation evidence with review from senior colleagues

• Contribute to threat modelling, data-flow reviews, control selection and secure integration patterns, and help validate that agreed controls work as intended

• Support technical assurance by collecting implementation evidence, completing control checks and addressing review findings

• Share knowledge with colleagues, contribute to reusable security components and suggest improvements to engineering practices

• Basic Qualifications

• Practical experience supporting or delivering cyber security controls within a cloud platform or service engineering team

• Working knowledge of security controls in cloud or hybrid environments, such as identity, networking, workloads, secrets and keys, policy, monitoring or security posture management

• Some practical experience with Microsoft Azure or an equivalent cloud platform and an understanding of cloud security

• Understanding of RBAC, ABAC, least privilege, managed identities, service principals or privileged access, with experience implementing at least some of these controls

• Exposure to GitHub, JFrog, SonarQube or equivalent source-code, CI/CD and artefact platforms, including security scanning or repository controls

• Some experience with automation, infrastructure as code, policy as code, scripting or APIs, or a willingness to develop these skills

• Experience supporting technology in production, including monitoring, troubleshooting, controlled change or incident support

• Ability to analyse vulnerability or security findings, implement defined remediation and provide evidence of completion

• Ability to create clear technical documentation such as configuration records, implementation plans, test results and operating procedures

• Ability to work independently on defined tasks, seek guidance appropriately and collaborate with software, cloud, platform, network, operations and assurance colleagues

• Willingness and ability to obtain and maintain the security clearance required for the role

Preferred Qualifications

• Experience supporting security engineering within policing, central government, national security, defence or another regulated environment

• Practical exposure to Azure Policy, Defender for Cloud, Azure Monitor, Log Analytics, Key Vault, Private Link, Network Security Groups or equivalent cloud-native technologies

• Practical exposure to GitHub Enterprise, GitHub Actions, GitHub Advanced Security, JFrog Artifactory, JFrog Xray or comparable DevSecOps platforms

• Exposure to cloud-native identity, workload, container, software-supply-chain, vulnerability-management or security-monitoring controls

• Experience with Terraform, Bicep, PowerShell, Azure CLI or similar automation and infrastructure-as-code technologies

• Awareness of security architecture and assurance methods, including threat modelling, secure design reviews and control assessment

• A relevant technical, cloud or cyber security certification, or equivalent practical learning, such as Microsoft Azure Security Engineer, AWS security training, GitHub Advanced Security or CompTIA Security+
  

What we do for you:

At Leidos we are PASSIONATE about customer success, UNITED as a team and INSPIRED to make a difference. We offer meaningful and engaging careers, a collaborative culture, and support for your career goals, all while nurturing a healthy work-life balance.

We provide an employment package that attracts, develops and retains only the best in talent. Our reward scheme includes:

Contributory Pension Scheme

Private Medical Insurance

33 days Annual Leave (including public and privilege holidays)

Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays and a cycle to work scheme)

Flexi-TIme

Commitment to Diversity:

We welcome applications from every part of the community and are committed to a truly diverse and inclusive culture.  We foster a sense of belonging, welcoming all perspectives and contributions, and providing equal access to opportunities and resources for everyone.  If you have a disability or need any reasonable adjustments during the application and selection stages please let us know, and we will respond in a way that best fits your needs.

Who We Are:

Leidos UK & EUROPE – we work to make the world safer, healthier, and more efficient through technology, engineering and science.

Leidos is a growing company delivering innovative technology and solutions focused on safeguarding critical capabilities and transformation in frontline services, our work in the United Kingdom includes addressing some of the most complex problems in defence, healthcare, government, safety and security, and transportation.

What Makes Us Different:

Purpose: you can use your passion and abilities at Leidos to keep the people you care about safe. We are at the forefront of machine learning, AI, cyber security and solutions. Using your skills in the technology frontline by helping to build a safer world.  You can inspire change.

Collaboration: having flexibility to do your job is one of our core benefits, enabling you to become part of our extraordinary team.  We have been empowering our people to work flexibly for years.  Whether you work from home, the office or on customer sites, we will give you the digital tools and the flexibility to work smarter and align your needs and ours.          

People: Leidos empowers people from every background to be themselves and gives you the tools to learn new skills by enabling growth whilst developing. We believe that extraordinary people need opportunities to grow, to be inspired and to inspire others. At Leidos, we invest in technical academies, career rotations and a career development plans that enhance your future.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

£47,600.00-£61,000.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.