Cyber Security and Compliance Engineer

Leidos•Fort Huachuca, AZ

1d•$87,100 - $157,450

About The Position

The Leidos team is seeking a highly skilled, Cyber Security Compliance Engineer to join our Army Global Unified Network (AGUN) Operations Team. The Global Enterprise Network Modernization – OCONUS (GENM-O) is a critical mission provider responsible for keeping the Army connected through global network modernization projects. The AGUN team will secure the next generation of Army transport to comply with the Joint Regional Security Stack (JRSS) divestment mandate. A phased systematic approach is required to provide individual sites with standardized, updated technology systems to ensure the Army’s Information Technology (IT) infrastructure is equipped to provide soldiers with cutting-edge technology to ensure applications, data, and enterprise services are accessible, trusted, and interoperable across the globe. The Cyber Security Compliance Engineer will be part of the AGUN Operate & Maintain Team (OMT). This position requires a strong background in cybersecurity compliance, system hardening, and Risk Management Framework (RMF) assessments. The ideal candidate will bring hands-on experience maintaining Assured Compliance Assessment Solution (ACAS) servers at the Operating System (OS) level, experience with the Enterprise Mission Assurance Support Service (eMASS) activities, conducting STIG/patching evaluations, and supporting Information Assurance Vulnerability Management (IAVM) compliance for both AGUN systems and infrastructure components.

Requirements

Active DoD Secret Clearance (must be current and verifiable).
Current CompTIA Security+ CE Certification (DoD 8570 IAT Level II baseline certification).
Minimum of 10 years’ experience.
Minimum 3+ years of security experience supporting DoW systems.
Hands-on experience at the Operating System (OS) level with Tenable Security Center/Nessus and ACAS platform administration.
Proficiency with eMASS and RMF package development.
Knowledge of IAVM compliance procedures and integration into system operations.
Strong understanding of DoW RMF, including security control assessment and POA&M management.
Experience conducting STIG compliance reviews on RHEL, Cisco IOS/NX-OS, and Palo Alto NGFWs.
Demonstrated experience reviewing DISA STIGs utilizing approved tools (eg. Evaluate STIG and STIG Viewer).
Strong teamwork and communications skills to work with Engineers and collaborate on documentation.

Nice To Haves

Military experience or prior support of DoW mission systems.
Familiarity with Joint Regional Security Stack (JRSS) network architecture and security compliance requirements.

Responsibilities

Ensuring compliance with DoD and AGUN cybersecurity policies and procedures.
Maintain Tenable Assured Compliance Assessment Solution (ACAS) servers at the Operating System (OS) level and perform routine vulnerability scans.
Conduct Security Technical Implementation Guide (STIG) assessments on Red Hat Linux (RHEL 8/9), Cisco network devices, and Palo Alto firewalls.
Ensure compliance with Information Assurance Vulnerability Management (IAVM) processes and reporting requirements.
Analyze vulnerability scan results and provide risk mitigation strategies and POA&Ms.
Document system security controls, findings, and implementation procedures.
Support security architecture analysis and coordination for systems utilizing AGUN environments.
Coordinate any Request for Change (RFC) actions in accordance with DISA Connection Approval Lifecycle (CAL) requirements.
Assist with site Command Operational Readiness Assessment (CORA) inspections to ensure compliance, policies, standards, and operational requirements.