CSSP Analyst

Leidos • Alexandria, VA

2d • $107,900 - $195,050 • Onsite

About The Position

Leidos’ Digital Sector is hiring a Cyber Security Service Provider (CSSP) Analyst / Site Assistance Visits (SAV) Analyst for the GSM-O II IDIQ contract’s Joint Service Provider (JSP) Cyber Security Task Order in Alexandria, Virginia. JSP provides IT products, services, solutions, and customer support to the Office of the Secretary of Defense, Chairman of the Joint Chiefs of Staff and Joint Staff, Director of Administration, Pentagon Force Protection Agency, Washington Headquarters Services, and other OSD offices. The JSP Cyber Security program performs services to secure the information security posture of DoD services.

The position is based onsite in the Alexandria, VA area. Partial remote work may be allowed at the discretion of Program and Customer Leadership. An active Secret security clearance, with TS/SCI eligibility, is required before starting.

Requirements

• Bachelor’s degree in a science or engineering discipline and 8 or more years of experience; additional experience may be considered in lieu of a degree.
• DoD 8570 IAT Level II certification.
• Active Secret security clearance, with TS/SCI eligibility, required before starting.

Responsibilities

• Conduct cybersecurity audits, inspections, vulnerability assessments, compliance assessments, and Security Readiness Reviews (SRRs), ensuring compliance with CSSP and Command Cyber Readiness Inspection (CCRI) evaluation criteria.
• Conduct Site Assistance Visits (SAVs) to assess regulatory compliance with Command Cyber Operational Readiness Inspection (CCORI), Public Key Infrastructure (PKI), North Atlantic Treaty Organization (NATO), and Balanced Survivability Assessment (BSA) requirements.
• Manage projects and track and report completion or closure of inspection findings documented in Plans of Action and Milestones (POA&Ms) and other inspection action items.
• Identify systems and assets not sufficiently assessed through automated scanning or routine periodic assessments, and recommend or conduct customized manual assessments as needed.
• Track and maintain post-inspection finding remediation and POA&M status reports for all inspections.
• Validate remediation of findings or submit artifacts and POA&Ms to the inspecting organization for approval.
• Perform technical, operational, and non-technical CCRI evaluations covering internal and external network infrastructure, DNS, network vulnerability scans, wireless and mobile security, enclave security, HBSS, configuration reviews, physical security, releasable networks, database security, cross-domain solutions, VoIP, VoSIP, VTC, exchange services, operating systems, web servers, and compliance directives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior