Full Job Description:We are looking for a Security Engineer to own the security posture of the environments where we build, test, and deliver advanced AI-cyber capabilities. You will be embedded with software engineers, reverse engineers, and vulnerability researchers, hardening the infrastructure, supply chains and pipelines on while guiding their secure development.
The work includes guiding and reviewing build integrity and supply chain review to threat modeling our own tooling. If you have ever looked at a supply chain & development environment and immediately started listing the ways you would secure it, this is the job. You will be the person the team trusts to tell them when something is a real risk and when it is just noise
As an AI Security Integration Engineer on our team, you will bridge the gap between traditional security infrastructure and modern programmatic defense. You will guide the secure development and evolution of software vulnerability tooling. Your primary focus will be working with the development team to maintainmaintaining the tool security posture utilizing continuous ATO. review workflows and pipelines by leveraging Python, assessing robust API integrations, maintained exploring AI/LLM orchestration to rapidly scale threat detection and response capabilities. Support ATO and continuous vuln management.
Responsibilities Include:- 8+ years of professional experience in security engineering, secure software development, or infrastructure security.
- Experience securing and using agentic tooling for writing and maintaining production code, managing cloud infrastructure, and release management frameworks.
- Experience owning security outcomes for a technical product from ideation to production, and influencing engineering teams toward secure design without direct authority.
- Experience hardening software deployments, networks, and production infrastructure at scale.
- Experience securing software clusters for online/cloud as well as on-prem or air-gapped installations.
- Experience with threat modeling, vulnerability management, and secure development practices across first- and third-party code.
- Familiarity with NIST RMF, continuous ATO, and control automation.
Minimum Qualifications:- 15+ years Hands-on experience securing and hardening Linux systems at the OS and network layer
- Expertise in at least one scripting language (Python preferred)
- Working knowledge of network protocols, cryptographic fundamentals, and key management
- Experience with infrastructure-as-code and containerization (Ansible/Terraform, Docker/Kubernetes)
- Experience administering or securing a CI/CD system (GitLab CI, Jenkins, or similar)
Nice-to-have Qualifications:- Experience working in accredited/classified environments, including cross-domain solutions
- Offensive security background - penetration testing, red team, or serious CTF experience
- Detection engineering or SIEM experience
- Experience with embedded, real-time, or otherwise constrained platforms
- Exposure to reverse engineering or vulnerability research
- Relevant certifications (CISSP, OSCP, GCIH) - useful, not required
- Non-human/agent identity and secrets management - short-lived credentials, scoping, and audit for autonomous actors, which is a genuinely different problem than human IAM.
- Sandboxing and egress control for code-executing agents.
- Familiarity with NIST AI RMF and the fact that continuous-ATO control automation now has to cover AI system controls, not just traditional ones.
- Using LLMs to accelerate the compliance grind control narrative drafting, evidence collection, POA&M triage.
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
Original Posting:August 24, 2026
Pay Range:Pay Range $131,300.00 - $237,350.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
