Cybersecurity Analyst

Leidos•Orlando, FL

1d•Onsite

About The Position

Leidos is seeking an experienced Cybersecurity Analyst to support the Department of the Air Force (DAF) Battle Network and its supporting infrastructure in Orlando, Florida. The role supports the fielding and operation of DAF digital infrastructure through day-to-day cybersecurity operations and long-term strategic maturation of complex, mission-critical systems. This is an on-site position requiring daily presence at the Orlando office. The analyst develops multiple Risk Management Framework (RMF) Assessment and Authorization (A&A) packages, documents security controls, builds system scanning plans, maintains Plans of Action and Milestones (POA&Ms), and assembles evidence validating control implementation. The position also supports security planning, assessment, risk analysis and management, certification, and awareness activities for Sensitive Compartmented Information (SCI) systems and classified network operations.

Requirements

Bachelor’s degree and at least 4 years of related experience; additional experience may be considered in lieu of a degree.
U.S. citizenship.
Currently possess an active DoD Secret clearance, with ability to upgrade to TS/SCI clearance upon hire.
DoD 8140-compliant baseline certification appropriate to the work role, such as IAT Level II.
Experience applying the NIST RMF in DoD and Intelligence Community environments.
Experience with Intelligence Community Directive (ICD) 503.
Experience with cross-domain or segmented architectures.
Experience developing and documenting NIST SP 800-53 security controls.
Experience working in a SCIF and on classified networks.
Excellent written and verbal communication skills, including ability to brief technical and non-technical customers and stakeholders.
Ability to collaborate effectively with a dispersed team.
Ability to work on-site daily at the Orlando, Florida office.

Nice To Haves

Master’s degree with at least 2 years of relevant experience.
Active TS/SCI clearance.
Experience developing and maintaining an authorization Body of Evidence.
Experience with eMASS, including eMASSter.
Experience with Evaluate-STIG.
Experience with Tenable Nessus.
Experience with Security Onion for network security monitoring (NSM).
Experience with Jira and Confluence.
Understanding of TEMPEST requirements and assessments.

Responsibilities

Build and support a culture grounded in Leidos values, beliefs, expectations, and high standards of ethical and respectful behavior.
Plan and document security for a complex, mission-critical defense network in accordance with the DoD RMF.
Plan, document, and obtain Government Authorizing Official authorizations and approvals, including IATT, IATO, ATO, ATC, and ISAs.
Perform and review security assessments of computing environments, identify vulnerabilities and non-compliance, and recommend mitigation strategies.
Validate and verify system security requirements definitions and analysis.
Analyze findings, prioritize risks, and track remediation to closure.
Partner with architects and system developers to identify and implement security functionality that consistently applies security policies and solutions.
Assess threats and risks to SCI systems and develop mitigations throughout the program life cycle.
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for SCI systems and classified network operations.
Develop RMF A&A packages, document security controls, build system scanning plans, maintain POA&Ms, and assemble a Body of Evidence validating control implementation.