Cybersecurity Analyst

Leidos•Orlando, FL

14d•$87,100 - $157,450•Onsite

About The Position

Leidos is seeking an experienced Cybersecurity Analyst to support the Department of the Air Force (DAF) Battle Network and its supporting infrastructure in Orlando, Florida. The role supports the fielding and operation of digital infrastructure through day-to-day cybersecurity operations and the long-term strategic maturation of complex, mission-critical systems. It requires daily on-site presence at the Orlando office. The analyst will develop multiple Risk Management Framework (RMF) Assessment and Authorization (A&A) packages, including documenting security controls, building a system scanning plan, maintaining Plans of Action and Milestones (POA&Ms), and assembling a Body of Evidence to validate control implementation. The work also includes security planning and assessments for classified and Sensitive Compartmented Information (SCI) systems, risk analysis and mitigation, and obtaining Government authorization and approval for systems and connections.

Requirements

Bachelor’s degree and 4+ years of related experience; additional experience may be considered in lieu of a degree.
U.S. citizenship.
Currently possess an active DoD Secret clearance and have the ability to upgrade to TS/SCI upon hire.
DoD 8140-compliant baseline certification appropriate to the work role, such as IAT Level II.
Experience applying the NIST RMF in DoD and Intelligence Community environments.
Experience with Intelligence Community Directive (ICD) 503.
Experience with cross-domain or segmented architectures.
Experience developing and documenting NIST SP 800-53 security controls.
Experience working in a SCIF and on classified networks.
Excellent written and verbal communication skills, including ability to brief technical and non-technical customers and stakeholders.
Ability to collaborate effectively with a dispersed team.

Nice To Haves

Master’s degree with 2+ years of relevant experience.
Active TS/SCI clearance.
Experience developing and maintaining an authorization Body of Evidence.
Experience with eMASS, including eMASSter.
Experience with Evaluate-STIG.
Experience with Tenable Nessus.
Experience with Security Onion for network security monitoring (NSM).
Experience with Jira and Confluence.
Understanding of TEMPEST requirements and assessments.

Responsibilities

Build and support a culture grounded in Leidos values, beliefs, expectations, and high standards of ethical and respectful behavior.
Plan and document the security of a complex, mission-critical defense network in accordance with the DoD RMF.
Plan, document, and obtain Government Authorizing Official authorizations and approvals, including IATT, IATO, ATO, ATC, and ISAs.
Perform and review security assessments of computing environments to identify vulnerabilities and cybersecurity non-compliance, and recommend mitigation strategies.
Validate and verify system security requirements definitions and analysis.
Analyze findings, prioritize risks, and track remediation to closure.
Partner with architects and system developers to identify and implement security functionality that consistently applies security policies and solutions.
Assess threats and risks to SCI systems and develop mitigations throughout the program life cycle.
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for SCI systems and classified network operations.
Develop RMF A&A packages, document security controls, build a system scanning plan, maintain POA&Ms, and assemble a Body of Evidence validating control implementation.