below marketmost similar roles pay hereabove market
This role pays less than
84%
of similar roles. Most pay
$142,400–$201,650
— the blue band above.
At the midpoint, this role pays about
$122k
versus about
$172k
for comparable roles.
Based on 240 similar postings.
Employer
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.
Leidos currently has
426 open roles
on FindRole.
Listed pay typically runs
$92,300–$166,850
across 344 roles with salary data.
The Cyber Security Engineer Journeyman will join the Leidos Digital team to support the U.S. Special Operations Command Enterprise Development, Application and Training Zero Trust initiative. This role provides engineering and operational support for Microsoft's enterprise security platform, focusing on implementing and maintaining Zero Trust capabilities across identity, endpoint, data, and security operations. The engineer will configure and tune analytics rules, dashboards, and automation workflows while integrating security telemetry from Microsoft and third-party systems. Key technologies include Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Logic Apps, and Behavior Analytics. Responsibilities involve supporting RMF activities, performing vulnerability assessments, and implementing DISA STIGs. The position requires experience with SIEM, SOAR, and UEBA operations to improve the Department of Defense Visibility and Analytics pillar.
Implement, configure, and maintain Microsoft security technologies within a Zero Trust architecture.
Deploy and administer Microsoft Sentinel, Defender, Purview, Entra ID, and Logic Apps.
Configure and tune analytics rules, dashboards, alerts, and automation workflows for threat detection.
Support UEBA and SOAR capabilities using Microsoft security platforms.
Integrate security telemetry from Microsoft and third-party enterprise systems.
Perform RMF activities, including security control implementation and maintaining ATO artifacts.
Conduct vulnerability assessments, system hardening, and DISA STIG implementations.
Troubleshoot platform issues and participate in cybersecurity investigations and incident response.
What we're looking for
Active Top Secret clearance with SCI eligibility (TS/SCI) is required.
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field.
4 to 8 years of relevant experience may be substituted for a degree.
Three or more years of experience supporting enterprise cybersecurity, Microsoft security platforms, or systems engineering.
Experience administering or supporting Microsoft enterprise security solutions.
Experience with one or more of the following: Microsoft Sentinel, Microsoft Defender XDR, Microsoft Purview, Microsoft Entra ID, Microsoft Logic Apps, or Microsoft Behavior Analytics.
Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
DoD 8140 / 8570 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent) with the ability to obtain IAT Level III.
Working knowledge of Windows and Linux operating systems.
Experience supporting RMF documentation or cybersecurity compliance activities.
Knowledge of DISA STIG implementation and cybersecurity best practices.
Microsoft certifications such as SC-100, SC-200, SC-300, or AZ-500 (preferred).
Experience with scripting or automation using PowerShell, Python, Bash, or C# (preferred).
Experience integrating Microsoft security products with third-party security tools (preferred).
Familiarity with MITRE ATT&CK, threat detection engineering, and DoD/NSA Zero Trust guidance (preferred).
Familiarity with USSOCOM SOFNET or other DoD enterprise environments (preferred).
Splunk
HBSS
Trellix
Ansible
CloudFormation
Python
PowerShell
AWS
Oracle
Cloud
IDS/IPS
VPN
Firewalls
SIEM
DevSecOps
GitHub
GitLab
SonarQube
Linux Red Hat
Windows
SolarWinds
Data Loss Prevention
Web-Proxy
Agile
STIG
SIEM
EDR
IDS/IPS
Firewalls
AWS
Azure
Google Cloud
Kubernetes
Active Directory
Linux
Windows Server
Digital Forensics
Malware Analysis
VPN
Microsoft 365
Salesforce
ServiceNow
Information Assurance
RMF
NIST) FIPS
Common Criteria
Cryptographic Components
Configuration Management
Embedded Software
Radio Communications
Networking
Security Requirements Analysis
NSA Certification
NIAP
System Evaluation Document
Key and Certificate Management Plan