Cloud Security Engineer

Leidos

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Seaside, CA
Salary: $107,900–$195,050 / yr
Employment: Full-time
Posted: 175 days ago
Freshness: Confirmed live today
Nearby: 75 roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $171k

This role $151k

$96k $215k

below market most similar roles pay here above market

This role pays less than 61% of similar roles. Most pay $142,450–$199,925 — the blue band above. At the midpoint, this role pays about $151k versus about $171k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Cloud Security Engineer

Role Posting Log in to save

The Cloud Security Engineer joins the Health and Services Sector team to support the Defense Testing and Assessment Center Manpower Personnel Testing Analysis mission. This role involves designing, implementing, and maintaining security architectures for cloud-based systems, specifically supporting web-based platforms like CAT-ASVAB. The engineer will manage Risk Management Framework activities, system authorization processes, and continuous monitoring to ensure compliance with NIST, DISA, and DoW cybersecurity requirements. Key responsibilities include enforcing STIGs, performing vulnerability remediation, and implementing Zero Trust and DevSecOps strategies. The position requires expertise in AWS, Azure, or DoW-approved cloud platforms, along with proficiency in eMASS, Fortify, and Sonatype. The work focuses on protecting the integrity and confidentiality of sensitive personnel data and mission-critical applications used for military recruiting and readiness initiatives.

Skills

Cloud Security RMF NIST SP 800-53 DevSecOps Zero Trust AWS Azure FedRAMP DISA SRG STIGs IAM eMASS Kubernetes Docker Fortify Sonatype Continuous Monitoring Vulnerability Management Encryption Code Scanning

What you'll do

Design, implement, and maintain security architectures for cloud-based systems supporting DoW testing platforms.
Ensure compliance with RMF, NIST SP 800-53, and DISA Cloud Security Requirements Guide.
Support the full lifecycle of system authorization (ATO), including developing SSPs and POA&Ms.
Implement and enforce Security Technical Implementation Guides (STIGs) and secure configuration baselines.
Monitor cloud environments for vulnerabilities and threats while coordinating incident response activities.
Engineer secure cloud infrastructure compliant with FedRAMP and DISA Impact Level requirements.
Perform security assessments, code scanning, and vulnerability remediation for cloud-hosted applications.
Maintain security artifacts and compliance evidence within systems such as eMASS.

What we're looking for

Bachelor’s degree or Master’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Minimum 10 years of experience designing, implementing, and managing cloud security solutions and cybersecurity programs.
Demonstrated experience with DoW RMF, ATO processes, and NIST 800-series frameworks.
Hands-on experience securing cloud environments in compliance with DISA SRG and FedRAMP requirements.
Experience implementing STIGs, vulnerability management, and continuous monitoring programs.
Strong knowledge of network security, encryption, identity and access management (IAM), and Zero Trust architectures.
Experience supporting DevSecOps pipelines and secure software development practices.
U.S. Citizenship required.
Ability to obtain and maintain required DoW background investigation (Tier 3 or higher).
Active DoW security clearance (preferred).
Relevant industry certifications such as CISSP, CCSP, AWS/Azure Security Specialty, CEH, or CASP+ (preferred).
Experience working in DoW or federal environments, particularly with DHRA, DMDC, or similar organizations (preferred).
Familiarity with eMASS, cybersecurity compliance tools, and automated security scanning tools (preferred).
Experience implementing Zero Trust Architecture and cloud-native security controls (preferred).
Knowledge of DevSecOps frameworks and container security (preferred).
Experience supporting large-scale enterprise cloud systems, testing platforms, or data analytics environments (preferred).