OfferDrill.

Jobs › Leidos

Countermeasures Engineer

Leidos · Shiloh, IL · $87,100–$157,450 a year · Full time

Posted Sep 29, 2026 · We last checked this listing on Oct 6, 2026

Apply at Leidos

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about an automation or integration you built that reduced work for a security team.

What they are checking: Whether they have shipped real tooling that made defenders faster at scale.

Tell me about a time you were the subject matter expert others relied on. How did you share what you knew?

What they are checking: Whether they lift the team's knowledge instead of becoming a bottleneck.

How do you keep up with new adversary techniques?

What they are checking: Whether they have a steady learning habit, which this fast-changing role requires.

What would you do

You want to deploy a countermeasure across classified networks, but operations worries it might break something. How do you handle it?

What they are checking: Whether they test carefully and work with operations rather than forcing changes onto mission systems.

An adversary changes tactics and your detection stops firing. How would you even know?

What they are checking: Whether they think about detection health monitoring and adversary adaptation.

About the work

Walk me through how you would design a custom countermeasure for a new APT technique you just read about.

What they are checking: Whether they can turn threat intelligence into a working detection or response that fits the environment.

What does Detection-as-Code mean to you, and how have you put it into practice?

What they are checking: Whether they use version control, testing and review for detections like real software.

How do you measure whether a countermeasure is actually working against an adversary?

What they are checking: Whether they test effectiveness and track results rather than assuming deployed means effective.

How would you build a malware detection that catches variants without flooding analysts with false positives?

What they are checking: Whether they balance coverage and precision when writing detections.

What languages and tools do you use for security automation, and why?

What they are checking: Whether they have practical scripting and pipeline skills, such as Python and DevSecOps tools.

How do you design a data correlation pipeline that scales across a very large enterprise?

What they are checking: Whether they think about volume, latency and reliability when processing security data at DoD scale.

Practice this interview out loud.

Offer builds a real interview for this exact role at Leidos from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Leidos.

Defend the Nation's Networks Through Innovation and Advanced Cyber Engineering Join the front lines of national defense as a Countermeasures Engineer supporting the GSM-O II program. You'll provide critical network operations and cyber defense support to the Defense Information Systems Agency (DISA), protecting DoD and Combatant Command networks from the world's most sophisticated adversaries. Your Mission Countermeasure Development & Deployment: • Design and deploy innovative, custom countermeasures to neutralize advanced threats and expose adversary activities on Classified terrain. • Develop cutting-edge malware detection capabilities tailored to emerging threat actor techniques • Continuously evaluate countermeasure effectiveness against evolving Advanced Persistent Threats (APTs) and adjust strategies in real-time • Apply Detection-as-a-Code principles to create scalable, version-controlled security solutions Automation & Engineering Excellence: • Architect and build automated cybersecurity solutions that deliver enterprise-wide protection at scale • Develop custom integrations, data correlation engines, and processing pipelines to reduce cyber risk across the DoD & Classified terrain. • Conduct agile development and maintenance of automation scripts and tools using modern DevSecOps practices • Serve as a Subject Matter Expert (SME) for the automation team, mentoring others and driving technical innovation Threat Intelligence & Situational Awareness: • Maintain continuous awareness of the cyber threat landscape by analyzing DoD, Intelligence Community, and open-source intelligence reporting • Identify new vulnerabilities, malware families, and threat actor TTPs that could impact mission-critical networks • Translate threat intelligence into actionable defensive measures and detection capabilities • Collaborate with DISA, mission partners, and Combatant Commands to enhance collective defense postur What You Bring Required Qualifications: • Active DoD Top-Secret Clearance • Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or related field with 8+ years of hands-on experience (or equivalent combination of education and experience) • DoD 8570 IAT Level II certification (Security+ CE or equivalent) , CSSP-A certification required within 180 days • Strong programming proficiency in at least one modern language: Python, Java, Ruby, or C++ • Proven experience developing custom malware detection capabilities Advanced understanding of: • TCP/IP, network protocols, ports, and traffic flow analysis • System administration across multiple platforms • OSI model and defense-in-depth security architecture • Common security elements and enterprise security technologies • Deep knowledge of threat actor lifecycle, attack vectors, exploitation methods, and intrusion set Tactics, Techniques, and Procedures (TTPs) • UNIX/Linux administrative skills Highly Desired Experience: • Direct experience with DISA and DoD network environments • Proven track record countering APTs and nation-state threats targeting DoD networks • Advanced cybersecurity analytics development and implementation • DevSecOps experience developing and supporting secure development environments • Automation expertise using Bash, Python, PowerShell, or other scripting languages • Linux and Windows system administration in cloud or virtualized environments (AWS, Azure, VMware) • API development and integration experience • Proficiency with security tools: Git, Sigma, Yara, Snort, Suricata • Hands-on malware analysis using reverse engineering techniques • Advanced certifications: GREM, OSCP, GCFA, CISSP, CASP, or GIAC Why This Role Matters As a Countermeasures Engineer, you'll be a force multiplier for national defense. Your innovative solutions will protect critical DoD infrastructure, support warfighter operations, and defend against nation-state cyber campaigns. You'll work alongside elite cyber professionals, engage directly with Intelligence Community partners, and see the immediate impact of your work on national security. If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares. Original Posting: September 29, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Apply at Leidos