CSSP Analyst

Leidos • Alexandria, VA

1d • Hybrid

About The Position

Leidos’s Digital Sector is hiring a Cyber Security Service Provider (CSSP) Analyst / Site Assistance Visits (SAV) Analyst for the GSM-O II IDIQ contract’s Joint Service Provider (JSP) Cyber Security Task Order in Alexandria, Virginia. JSP provides IT products, services, solutions, and customer support to the Office of the Secretary of Defense, the Chairman of the Joint Chiefs of Staff and Joint Staff, the Director of Administration, the Pentagon Force Protection Agency, Washington Headquarters Services, and other OSD offices. The JSP Cyber Security program performs services to secure the information security posture of DoD services.

The role is based onsite in the Alexandria, Virginia area. Partial remote work may be allowed at the discretion of Program and Customer Leadership. An active Secret security clearance, with TS/SCI eligibility, is required before starting.

Requirements

• Bachelor’s degree in a science or engineering discipline and at least 8 years of experience; additional experience may be considered in lieu of a degree.
• DoD 8570 IAT Level II certification.
• Active Secret security clearance, with TS/SCI eligibility, required prior to start.

Responsibilities

• Conduct cybersecurity audits, inspections, vulnerability assessments, compliance assessments, and Security Readiness Reviews (SRRs), and ensure compliance with CSSP and Command Cyber Readiness Inspection (CCRI) evaluation criteria.
• Execute Site Assistance Visits (SAVs) to ensure regulatory compliance with Command Cyber Operational Readiness Inspection (CCORI), Public Key Infrastructure (PKI), NATO, and Balanced Survivability Assessment (BSA) requirements.
• Manage projects and track and report completion or closure of inspection findings documented in Plans of Action and Milestones (POA&Ms) and other inspection action items.
• Identify systems and assets not sufficiently assessed through automated scanning or routine periodic assessments, and recommend or conduct customized manual assessments as needed.
• Track and maintain Post Inspection Finding Remediation and POA&M Status Reports for all inspections.
• Validate remediation of findings or submit artifacts or POA&Ms to the inspecting organization for approval.
• Perform technical, operational, and non-technical CCRI evaluation activities involving internal and external network infrastructure, DNS, vulnerability scanning, wireless and mobile security, enclave security, HBSS, configuration reviews, physical security, releasable networks, database security, cross-domain solutions, VoIP, VoSIP, VTC, exchange services, operating systems, web servers, and compliance directives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior