Cyber Security Systems Engineer

Leidos•Alexandria, VA

2d•$107,900 - $195,050•Onsite

About The Position

The Test and Training Enabling Architecture (TENA) program at Leidos is looking to add a Cyber Security Systems Engineer. Our mission is to develop tools for the United States Department of Defense test and training communities, to increase the speed of the development cycle, to get capabilities to the warfighter more rapidly. The Cyber Security Systems Engineer will work within a team of engineers, developers, and system administrators adding new capabilities to our enclaves, as well as ensuring the existing systems are secure and performing as intended. This position is required to work on-site in our Alexandria, VA office.

Requirements

US Citizen with at least an active DoD Secret clearance.
Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
At least one IAT Level 1 or 2 certification.
Experience developing and reviewing security systems security plans, security risk assessments, contingency plans, or configuration management plans.
Experience configuring, running, and analyzing vulnerability scans.
Experience with incident response plans, plan of actions and milestones, risk management plans, and vulnerability management plans.
Strong analytical, communication, problem solving, and interpersonal skills.
Experience establishing a System Security Engineering (SSE) management process to integrate security and privacy controls into complex hardware and software systems.
DoD Trellix system (ePo administration) on Linux systems.
DoD ACAS/Tenable-Nessus System.
Experience with STIGs on both Linux, Windows and other network equipment.
Familiar with IAVMs and vulnerability mitigation.

Nice To Haves

4+ years DoD Trellix system user/admin experience (ePo administration) with Linux systems.
Experience of having installed and managed Tenable-Nessus Systems.
5+ years of experience with applying and monitoring STIGs on both Linux, Windows, and other network equipment.
Familiar with IAVMs and vulnerability mitigation processes and procedures working with/in a DoD organization.

Responsibilities

Coordinate with Cybersecurity personnel to conduct and review technical cybersecurity assessments.
Perform and maintain vulnerability scans and create reports.
Perform review and analysis of cybersecurity event logs.
Identify points of vulnerability and non-compliance with established cybersecurity standards and regulations.
Collaborate with our DevSecOps team.
Maintain Authorization to Operate (ATO) records.
Manage and report Plan of Actions and Milestones (POA&M) compliance.
Review certification and accreditation (C&A) documentation.
Perform system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of operational systems.
Apply system security engineering expertise.