Cyber Security Software Engineer

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Leidos’

Defense Uncrewed Systems Integration

and Test

is seeking a motivated and ambitious

UAS

Cyber SW Engineer

to join the Software, Simulation, Systems Engineering and Integration Directorate (S3I) Joint Technology Center – Systems Integration Lab (JSIL) Technology and Certification Center. As a

UAS

Cyber SW Engineer

, you’ll be an integral part of a dynamic engineering team that supports UAS cyber systems. This role bridges the gap between software engineering and cybersecurity. The candidate will be responsible for the security architecture, secure coding, static/dynamic code analysis, and vulnerability remediation for critical application software across the full software development lifecycle. Working directly within an Agile/Scrum team, the candidate will ensure complex systems meet rigorous DoD cybersecurity requirements (such as DISA STIGs/SRGs and RMF standards) while actively contributing to modern continuous integration and automated software delivery pipelines.
Leidos Defense Sector

provides a diverse portfolio of systems, solutions, and services covering land, sea, air, space, and cyberspace for customers worldwide. Solutions for Defense include enterprise and mission IT, large-scale intelligence systems, command and control, geospatial and data analytics, cybersecurity, logistics, training, and intelligence analysis and operations support. Our team is solving the world’s toughest security challenges for customers with “can’t fail” missions. Secure Software Development & Engineering:

Participate in the full lifecycle design, coding, testing, and integration of secure embedded and application software for military systems using C/C++ and Object-Oriented methodologies.
Static & Dynamic Code Analysis:

Perform, analyze, and track static and dynamic code analysis scan results (e.g., Security Control Implementation & Hardening:

Work with cross-functional software teams to implement and automate technical security controls, including DISA STIGs, SRGs, and industry best practice hardening guidelines across Linux, databases, and application baselines.
Evaluate software requirements, system design changes, and proposed merge requests for security impact to determine authorization and risk mitigation.
CI/CD & Pipeline Security (DevSecOps):

Integrate automated security testing and compliance checks within CI/CD pipelines (e.g., Microsoft Azure DevOps, Git).
Vulnerability Scanning & Remediation:

Analyze vulnerability scan outputs (such as ACAS/Nessus) to develop and implement code- or configuration-level remediation plans.
Assist in updating Risk Management Framework (RMF) artifacts, including software/firmware inventories, interface specifications, and Ports, Protocols, and Services Management (PPSM) documentation.
~ Actively participate in Agile/Scrum ceremonies, technical interchange meetings, and hardware/software design reviews alongside Systems, Cyber, Safety, Operations, and Test teams.

The candidate must have a Bachelor’s degree in Software or Computer Engineering or a related STEM field from an accredited institution with four (4) years of applicable experience, or an additional Masters degree in a Cyber Security related field with two (2) years of experience.
S. citizenship, an active DoW Secret Security Clearance and the ability to maintain a Secret Clearance are required.
Strong hands-on programming experience with Rust, C/C++ or other Object-Oriented languages.
Direct experience running and interpreting

Static Code Analysis

tools (e.g., Practical understanding of

DISA STIGs/SRGs

and application security (AppSec) hardening.
Experience operating within an

Agile/Scrum

software development environment.
Git, Visual Studio, etc. ).
Strong working knowledge of

Linux

and Windows operating environments.
Strong written and verbal communication skills with the ability to interact effectively with customer stakeholders and multi-disciplinary teams.
Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.