Senior Product Application Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $87.1k - $157.4k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Serve as a hands-on product security engineer for Enterprise products and collaborate with cybersecurity, product, software, DevOps, infrastructure, systems, and program stakeholders • Translate policies, customer requirements, threat information, and compliance obligations into product security requirements and engineering guidance • Perform threat modeling, attack-surface analysis, security architecture and design reviews, and targeted code or configuration reviews • Design, integrate, and improve automated security controls in CI/CD pipelines • Define, automate, and validate secure configurations for Linux, Kubernetes, containers, databases, identity services, networking, and platform services • Develop and validate hardened baselines using DISA STIGs, SRGs, CIS Benchmarks, customer requirements, and industry best practices • Assess vulnerabilities, analyze technical risk, prioritize findings, provide remediation guidance, coordinate with owning teams, and verify corrective actions • Support authentication, authorization, RBAC, encryption, secrets and certificate management, audit logging, service-to-service communication, and data protection controls • Develop reusable security tools, scripts, pipeline templates, configuration baselines, reporting capabilities, and secure implementation patterns • Create and maintain security engineering documentation and technical evidence for NIST, CMMC, RMF, DHS, TSA, DISA, customer-specific, and international requirements • Perform security testing and technical validation of releases and architectural or platform changes, including targeted penetration testing when appropriate • Communicate findings, remediation options, residual risks, and technical tradeoffs to technical and nontechnical stakeholders and promote secure development practices

🎯 Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Software Engineering, Information Systems, or related technical discipline with 8+ years of relevant experience; or master's degree with 6+ years of relevant experience • Additional relevant experience may be considered in lieu of a degree where permitted • Hands-on experience in product, application, software, DevSecOps, platform, or related cybersecurity engineering • Experience integrating security throughout the software development lifecycle • Experience with threat modeling, application or API security reviews, security architecture reviews, or secure design assessments • Experience integrating SAST, SCA, secret scanning, container scanning, or infrastructure-as-code analysis into CI/CD pipelines • Experience securing Linux systems, containerized applications, or Kubernetes environments • Experience performing vulnerability assessments, analyzing findings, developing remediation guidance, and communicating technical risk • Experience developing automation using Python, Bash, PowerShell, or another applicable programming language • Working knowledge of OWASP application security risks and security frameworks or baselines such as NIST SP 800-53, NIST SP 800-171, CMMC, RMF, DISA STIGs, or CIS Benchmarks • Ability to work independently across multiple technical disciplines and collaborate with engineering, cybersecurity, program, and customer stakeholders • Strong written and verbal communication skills, including documenting technical decisions and explaining security risks and tradeoffs • Ability to obtain and maintain the public trust or security clearance required by assigned programs • Active certification meeting applicable DoD 8140 or customer requirements, or ability to obtain the required certification within 6 months of employment

🏖️ Benefits

• Competitive compensation • Health and Wellness programs • Income Protection • Paid Leave • Retirement