Data Security Engineer

Position Summary

The C5ISR Center Cyber Security Service Provider (CSSP) delivers 24x7x365 defensive cyber operations supporting critical Department of War (DoW) missions. Our team provides continuous monitoring, threat detection, incident response, and vulnerability management across cloud and on-premises environments, including AWS, Azure, GCP, Oracle Cloud, and SaaS platforms.

The Data Security Engineer will build, optimize, and sustain the cybersecurity data pipelines that power defensive operations. You will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; optimize data performance and quality; automate workflows; and troubleshoot dependencies across Elastic, Kafka, and CI/CD systems.

You will partner with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response.

Clearance

Must have an active Top Secret security clearance; US Citizenship required.

Primary Responsibilities

• Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem (Elasticsearch, Logstash, Kibana, Fleet) to enable high-volume, high-availability operations.
• Design, maintain, and optimize scalable cybersecurity ETL pipelines using the Elastic suite of tools.
• Develop transformations and enrichments for diverse security log and telemetry sources.
• Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
• Implement data validation, deduplication, and quality controls to ensure data integrity.
• Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
• Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
• Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
• Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
• Maintain technical documentation, SOPs, and engineering artifacts.

Basic Qualifications

• Bachelor's degree and 4+ years of relevant experience; additional experience may substitute in lieu of degree.
• 3+ years of data engineering, data analysis, cybersecurity data engineering, or related experience.
• Experience with data ingestion, transformation, normalization, or high-volume data-processing pipelines.
• Experience with relevant technologies such as Elastic Stack, Kafka, Python, Bash, and CI/CD tooling.
• Familiarity with Elastic Common Schema (ECS) or similar cybersecurity data models.
• Required DoD 8570/8140-aligned and CSSP Analyst certifications, as applicable to the position.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
• Experience working with Ruby.
• Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
• Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.

Additional information

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting: August 13, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.