3 days ago
Farnborough, United KingdomMid Level
Responsibilities
- Deliver assigned security controls through build, configuration, deployment, testing, operation, and continuous improvement.
- Configure and maintain Azure security controls including Azure Policy, Network Security Groups, private endpoints, Key Vault, Defender for Cloud, Azure Monitor, Log Analytics, workload protection, and landing-zone controls.
- Implement identity and authorization controls using Microsoft Entra ID, RBAC, ABAC, managed identities, service principals, Conditional Access, and least-privilege principles.
- Configure security controls in GitHub and JFrog workflows, including repository protections, artifact controls, and code, dependency, secret, container, and artifact scanning.
- Support CI/CD security controls including policy checks, software composition analysis, static and dynamic testing, infrastructure scanning, and approval gates.
- Develop security automation using infrastructure as code, policy as code, scripting, and APIs.
- Support production security technologies through monitoring, troubleshooting, upgrades, policy tuning, incident support, and lifecycle activities.
- Triage vulnerability findings, implement remediation, maintain delivery backlogs, and support retesting and closure.
- Configure security telemetry, alerts, and integrations and assist with investigations and corrective actions.
- Create and maintain low-level designs, secure build standards, configuration baselines, test plans, runbooks, and implementation evidence.
- Contribute to threat modeling, data-flow reviews, control selection, secure integration patterns, and technical assurance activities.
Requirements
- Practical experience delivering or supporting cyber security controls within a cloud platform or service engineering team.
- Working knowledge of cloud or hybrid security controls covering areas such as identity, networking, workloads, secrets, keys, policy, monitoring, or security posture management.
- Some practical experience with Microsoft Azure or an equivalent cloud platform and an understanding of cloud security.
- Experience implementing some combination of RBAC, ABAC, least privilege, managed identities, service principals, or privileged access controls.
- Exposure to GitHub, JFrog, SonarQube, or equivalent source-code, CI/CD, and artifact platforms, including security scanning or repository controls.
- Experience or willingness to develop skills in automation, infrastructure as code, policy as code, scripting, or APIs.
- Experience supporting production technology through monitoring, troubleshooting, controlled change, or incident support.
- Ability to analyze security findings, implement defined remediation, and provide completion evidence.
- Ability to create technical documentation such as configuration records, implementation plans, test results, and operating procedures.
- Ability to work independently on defined tasks and collaborate with software, cloud, platform, network, operations, and assurance colleagues.
- Ability and willingness to obtain and maintain the security clearance required for the role.
- Preferred qualifications include regulated-sector security engineering experience, Azure security services, GitHub Enterprise, GitHub Actions, GitHub Advanced Security, JFrog Artifactory, JFrog Xray, Terraform, Bicep, PowerShell, Azure CLI, threat modeling, secure design reviews, control assessment, and relevant cloud or cyber security certifications.
Benefits
- Contributory Pension Scheme.
- Private Medical Insurance.
- 33 days of annual leave including public and privilege holidays.
- Flexible benefits including life assurance, health schemes, gym memberships, annual buy and sell holidays, and a cycle to work scheme.
- Flexi-Time and flexible working from home, office, or customer sites.
- Career development through technical academies, career rotations, and career development plans.
About Leidos
Leidos builds and operates technology and engineering solutions for defense, intelligence, civil, and health agencies, including systems integration, cyber, enterprise IT, sensors, and healthcare IT. It primarily sells through government contracts and long-term programs, plus managed services and mission software. Founded in 1969 and headquartered in Reston, Virginia, Leidos is a Fortune 500 public company on the NYSE; customers include U.S. defense and intelligence agencies and civil bodies such as the FAA.