Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

Leidos • Suitland, MD

6d • Onsite

About The Position

Leidos is hiring a hands-on Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE) to support a complex, mission-driven enterprise environment in Suitland, Maryland. The engineering-focused role secures, administers, hardens, and maintains critical systems and infrastructure while collaborating with network, systems, cybersecurity, and architecture teams to strengthen the organization’s security posture. The work combines technical security expertise with hands-on engineering, vulnerability remediation, security testing, and architecture support. The position is open to candidates across a range of experience levels, with scope and compensation aligned to the selected candidate’s background and expertise.

The role requires an active TS/SCI clearance and required program access, along with relevant security engineering experience and an active IAM Level III DoD 8140-approved baseline certification. Leidos lists a pay range of $107,900 to $195,050. The original posting date is October 30, 2026.

Requirements

• Bachelor’s degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or a related field with 8+ or 12+ years of experience; alternatively, a master’s degree with 6+ or 10+ years of experience. Additional relevant experience may be considered in lieu of a degree.
• Active TS/SCI clearance in DISS and required program access.
• Security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.
• Extensive experience with Intelligence Community, DoD, DISA, NAVINTEL Cybersecurity, FLTCYBERCOM, and DoDIIS processes, tools, systems, reporting mechanisms, and requirements supporting Assessment and Authorization.
• Software development experience using Java, C, C++, or other programming or scripting languages, including designing and developing host-based and network-based scanning tools.
• Experience with SCAP-based tools and specifications.
• Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network-based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.
• Extensive experience hardening modern Unix operating systems, such as Oracle Solaris 10/11 and RHEL, as well as Microsoft Windows environments using STIGs.
• Extensive experience securing systems and software in accordance with IC, DoD, and industry security best practices.
• Experience developing security controls, testing methodologies, and test procedures for systems, cloud-based architectures, and Cross Domain Solutions.
• Demonstrated ability to take a proactive, results-oriented approach while building effective customer and team relationships.
• Active IAM Level III DoD 8140-approved baseline certification, such as CISSP or SecurityX.

Responsibilities

• Provide hands-on administration, configuration, security hardening, troubleshooting, and vulnerability remediation for enterprise infrastructure.
• Research and evaluate cybersecurity tools, technologies, and methodologies to identify opportunities to strengthen enterprise security.
• Participate in architecture and engineering reviews and provide security recommendations for new capabilities, technologies, and infrastructure changes.
• Troubleshoot complex security issues across storage, networking, operating systems, authentication, and enterprise infrastructure.
• Conduct vulnerability assessments, ethical hacking, and penetration testing to identify and address security risks.
• Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and management interfaces, based on operational and security requirements.
• Apply and validate DISA STIGs, SRGs, vendor security guidance, and industry security best practices.
• Configure and maintain secure administrative access using SSH, HTTPS/TLS, role-based access control, centralized authentication, and least privilege principles.
• Develop and deliver training on cybersecurity tools, technologies, and processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level