Back to jobs

Data Security Engineer

Adelphi, MD

Pay
$87,100–157,450/yearAnnual period assumed — pay source
Pay Range: Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Read the full posting
Work setting
HybridLocation limits apply — work setting source
Leidos is seeking a Data Security Engineer to build, optimize, and sustain the cybersecurity data pipelines that power these defensive operations. You will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; optimize data performance and quality; automate workflows; and troubleshoot dependencies across Elastic, Kafka, and CI/CD systems. You will partner with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response. This position is hybrid on-site 3 days/week in Adelphi, Maryland and requires U.S. Citizenship and an active TS/SCI clearance. Primary Responsibilities:
Read the full posting
Employment
Full-time — employment source
Employment type in the employer’s posting: Full time
From the employer’s posting
Apply at Leidos

What you’ll work on

Full posting
  • Design and optimize security data ingestion and normalization pipelines

  • Build transformations and enrichments for diverse security log sources

  • Configure and tune Elasticsearch, Logstash, Kibana and Fleet for high volume

  • Implement data validation, deduplication and quality controls

  • Automate ingestion and engineering workflows with Python and Bash

From the employer’s posting
Design, maintain, and optimize scalable cybersecurity data ingestion and normalization pipelines.
Develop transformations and enrichments for diverse security log and telemetry sources.
Configure and optimize Elasticsearch, Logstash, Kibana, and Fleet for high-volume, high-availability operations.
Implement data validation, deduplication, and quality controls to ensure data integrity.
Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.

What you’ll bring

All qualifications

Core experience

  • Bachelor's degree and 4–8 years of relevant experience, or additional experience may substitute in lieu of degree.
  • 3+ years of data engineering, data analysis, cybersecurity data engineering, or related experience.
  • Experience with data ingestion, transformation, normalization, or high-volume data-processing pipelines.
  • Experience with relevant technologies such as Elastic Stack, Kafka, Python, Bash, and CI/CD tooling.
  • Familiarity with Elastic Common Schema (ECS) or similar cybersecurity data models.

Preferred experience

  • Experience onboarding and normalizing high-volume cybersecurity telemetry and log sources.
  • Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
  • Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
  • Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.
Qualification wording
Bachelor's degree and 4–8 years of relevant experience, or additional experience may substitute in lieu of degree.
3+ years of data engineering, data analysis, cybersecurity data engineering, or related experience.
Experience with data ingestion, transformation, normalization, or high-volume data-processing pipelines.
Experience with relevant technologies such as Elastic Stack, Kafka, Python, Bash, and CI/CD tooling.
Familiarity with Elastic Common Schema (ECS) or similar cybersecurity data models.
Experience onboarding and normalizing high-volume cybersecurity telemetry and log sources.
Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.
Education & alternatives
Basic Qualifications: - Bachelor's degree and 4–8 years of relevant experience, or additional experience may substitute in lieu of degree. - 3+ years of data engineering, data analysis, cybersecurity data engineering, or related experience.

Tools in this posting

  • Bash
  • Python
  • AWS
  • Azure
  • Elasticsearch
  • GCP
  • Kafka
  • Kibana
  • Logstash
  • Oracle
Source — Tool mentions in context
- Implement data validation, deduplication, and quality controls to ensure data integrity. - Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools. - Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
- Experience with data ingestion, transformation, normalization, or high-volume data-processing pipelines. - Experience with relevant technologies such as Elastic Stack, Kafka, Python, Bash, and CI/CD tooling. - Familiarity with Elastic Common Schema (ECS) or similar cybersecurity data models.
- Experience onboarding and normalizing high-volume cybersecurity telemetry and log sources. - Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices. - Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
The C5ISR Center Cyber Security Service Provider (CSSP) delivers 24x7x365 defensive cyber operations supporting critical Department of War (DoW) missions. Our team provides continuous monitoring, threat detection, incident response, and vulnerability management across cloud and on-premises environments, including AWS, Azure, GCP, Oracle Cloud, and SaaS platforms. Leidos is seeking a Data Security Engineer to build, optimize, and sustain the cybersecurity data pipelines that power these defensive operations. You will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; optimize data performance and quality; automate workflows; and troubleshoot dependencies across Elastic, Kafka, and CI/CD systems. You will partner with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response.
- Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices. - Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments. - Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.
- Develop transformations and enrichments for diverse security log and telemetry sources. - Configure and optimize Elasticsearch, Logstash, Kibana, and Fleet for high-volume, high-availability operations. - Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
The C5ISR Center Cyber Security Service Provider (CSSP) delivers 24x7x365 defensive cyber operations supporting critical Department of War (DoW) missions. Our team provides continuous monitoring, threat detection, incident response, and vulnerability management across cloud and on-premises environments, including AWS, Azure, GCP, Oracle Cloud, and SaaS platforms. Leidos is seeking a Data Security Engineer to build, optimize, and sustain the cybersecurity data pipelines that power these defensive operations. You will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; optimize data performance and quality; automate workflows; and troubleshoot dependencies across Elastic, Kafka, and CI/CD systems. You will partner with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response. This position is hybrid on-site 3 days/week in Adelphi, Maryland and requires U.S. Citizenship and an active TS/SCI clearance.
- Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance. - Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling. - Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.

Posting record

Report an error
Status in our records
Live
First seen by us
Aug 13, 2026 · 76 days ago
Recorded sightings
151
Last seen by us
Oct 29, 2026

These dates show when we found the posting. Check the employer’s website to confirm it is still accepting applications.

Your next step

  • Have your resume and examples of relevant work ready.
  • Check the listed location, eligibility and core experience before starting.

Complete your application on leidos.wd5.myworkdayjobs.com. The employer’s form will show what is required.

Already applied? Track this application

Job description

View original posting ↗

The C5ISR Center Cyber Security Service Provider (CSSP) delivers 24x7x365 defensive cyber operations supporting critical Department of War (DoW) missions. Our team provides continuous monitoring, threat detection, incident response, and vulnerability management across cloud and on-premises environments, including AWS, Azure, GCP, Oracle Cloud, and SaaS platforms.

Leidos is seeking a Data Security Engineer to build, optimize, and sustain the cybersecurity data pipelines that power these defensive operations. You will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; optimize data performance and quality; automate workflows; and troubleshoot dependencies across Elastic, Kafka, and CI/CD systems. You will partner with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response.

This position is hybrid on-site 3 days/week in Adelphi, Maryland and requires U.S. Citizenship and an active TS/SCI clearance.

Primary Responsibilities:

  • Design, maintain, and optimize scalable cybersecurity data ingestion and normalization pipelines.

  • Develop transformations and enrichments for diverse security log and telemetry sources.

  • Configure and optimize Elasticsearch, Logstash, Kibana, and Fleet for high-volume, high-availability operations.

  • Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.

  • Implement data validation, deduplication, and quality controls to ensure data integrity.

  • Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.

  • Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.

  • Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.

  • Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.

  • Maintain technical documentation, SOPs, and engineering artifacts.

​

Basic Qualifications:

  • Bachelor's degree and 4–8 years of relevant experience, or additional experience may substitute in lieu of degree.

  • 3+ years of data engineering, data analysis, cybersecurity data engineering, or related experience.

  • Experience with data ingestion, transformation, normalization, or high-volume data-processing pipelines.

  • Experience with relevant technologies such as Elastic Stack, Kafka, Python, Bash, and CI/CD tooling.

  • Familiarity with Elastic Common Schema (ECS) or similar cybersecurity data models.

  • Required DoD 8570/8140-aligned and CSSP Analyst certifications, as applicable to the position.

  • U.S. Citizenship with an active TS/SCI clearance.

  • Strong written and verbal communication skills.

​

Preferred Qualifications:

  • Experience onboarding and normalizing high-volume cybersecurity telemetry and log sources.

  • Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.

  • Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.

  • Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.

  • Experience supporting a DoD CSSP, SOC, or other large-scale defensive cyber operations environment.

  • Strong troubleshooting skills across complex data pipelines and interconnected systems.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

August 13, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Source details

View original posting ↗

Source notes

Source excerpts

Selected passages from the saved posting. Check the full description for conditions and exceptions.

Pay
Pay Range: Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Location & working pattern

Adelphi, MD

Leidos is seeking a Data Security Engineer to build, optimize, and sustain the cybersecurity data pipelines that power these defensive operations. You will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; optimize data performance and quality; automate workflows; and troubleshoot dependencies across Elastic, Kafka, and CI/CD systems. You will partner with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response. This position is hybrid on-site 3 days/week in Adelphi, Maryland and requires U.S. Citizenship and an active TS/SCI clearance. Primary Responsibilities:
More source context
- Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices. - Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments. - Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.
Work authorization
Leidos is seeking a Data Security Engineer to build, optimize, and sustain the cybersecurity data pipelines that power these defensive operations. You will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; optimize data performance and quality; automate workflows; and troubleshoot dependencies across Elastic, Kafka, and CI/CD systems. You will partner with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response. This position is hybrid on-site 3 days/week in Adelphi, Maryland and requires U.S. Citizenship and an active TS/SCI clearance. Primary Responsibilities:
More source context
- Required DoD 8570/8140-aligned and CSSP Analyst certifications, as applicable to the position. - U.S. Citizenship with an active TS/SCI clearance. - Strong written and verbal communication skills.

See how this role fits your experience

Add your resume to compare the role’s scope, tools and requirements with your experience.

Find answers in the posting

AI
How answers work

AI selects complete passages from this posting. Check them for conditions and exceptions.

Uses this posting and your question. No profile needed.