Information System Security Engineer

Leidos•San Diego, CA

11d•$107,900 - $195,050•Onsite

About The Position

Leidos' Corporate Information Security Office, reporting through the Digital Sector, is seeking an Information System Security Engineer to support various information systems and act as the Subject Matter Expect to Junior System Administrators. The successful candidate will be responsible for maintaining, securing, and supporting complex classified information systems, as well as ensuring compliance with security protocols and regulations. Location: This position is full time, onsite at our Campus Point, San Diego office. Clearance: You must currently hold an active DoD Top Secret clearance to be considered and must be eligible to obtain Special Access Program and Special Compartmented Access (SCI) post hire.

Requirements

Must be a U.S. Citizen.
Bachelor's Degree with 8-12 years of experience, Master’s degree with 6-10 years of experience, or equivalent relevant experience and/or industry-standard certifications may be considered in lieu of degree.
Must hold a current Active Top Secret security clearance to be considered along with sustained ability to be cleared to Special Access Programs and ability to obtain Top Secret/SCI security clearance.
Must have a DoD 8140/8570 IAT level II or higher certification such as CompTIA Security+.
Professional-level knowledge and hands-on experience administering, engineering, or securing Windows and Linux operating systems, including enterprise server and workstation environments.
Expert-level knowledge of virtualization technologies, enterprise storage platforms, and backup/recovery solutions, including the security considerations associated with each.
Working knowledge of enterprise networking concepts and technologies, including TCP/IP, routing, switching, VLANs, firewalls, network segmentation, DNS, authentication, and secure network architecture.
3+ years of demonstrated experience supporting Special Access Program (SAP) environments and applying applicable cybersecurity requirements, including the RMF and JSIG.
Experience interpreting cybersecurity requirements and translating security controls into technical configurations, engineering requirements, and system implementations.
Experience implementing, assessing, and maintaining technical security controls across operating systems, networks, virtualization platforms, storage, and supporting infrastructure.
Hands-on experience implementing and maintaining DISA STIGs, SRGs, Nessus, and secure configuration baselines.
Knowledge of enterprise security technologies and concepts, including Active Directory, Group Policy, endpoint security, centralized logging, auditing, privileged access, encryption, and access control.
Experience supporting the system development and security lifecycle, including design, integration, testing, deployment, authorization, continuous monitoring, maintenance, and decommissioning.
Ability to troubleshoot complex technical and cybersecurity issues spanning operating systems, networking, or other information system components.
Strong technical documentation and communication skills with the ability to clearly communicate security risks, technical requirements, remediation strategies, and engineering recommendations to both technical and nontechnical stakeholders.
Experience with the Risk Management Framework (RMF) and maintaining compliance artifacts such as SCAP scans, STIGs, and Nessus Vulnerability reports.
Experience developing or maintaining technical procedures, system build documentation, configuration baselines, work instructions, scripts, or automation used to support secure and repeatable system deployments.
Experience designing or securing air-gapped environments including offline patching, software repositories, vulnerability management, and configuration management.

Nice To Haves

ISC(2) Certification Information System Security Professional (CISSP) or Information System Security Engineering Professional (CISSP-ISSEP) certification.
RedHat Certified System Administrator (RHCSA) certification.
Demonstrated ability to independently interpret JSIG/RMF controls and translate them into practical technical architectures, configurations, implementation guidance, and validation procedures.
Experience developing and maintaining SIEM/log-management platforms such as Splunk, and endpoint security technologies to include DLP.

Responsibilities

Serve as the Information System Security Engineer (ISSE) for Special Access Program information systems, providing security engineering support throughout the full system lifecycle from research and development through deployment, accreditation, operations, maintenance, and decommissioning.
Design, develop, integrate, and maintain secure classified information systems and architectures in accordance with the Joint Special Access Program Implementation Guide (JSIG), Risk Management Framework (RMF), applicable DoW policies, and program-specific security requirements.
Develop and maintain system security architecture, including network segmentation, boundary protections, authentication, privileged access, encryption, auditing, logging, secure communications, virtualization, storage, and data protection solutions.
Implement and validate DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), vendor security guidance, and program specific hardening requirements across Windows, Linux, network, virtualization, storage, and supporting infrastructure.
Coordinate with ISSMs, ISSOs, System Administrators, and Program Management to resolve technical and compliance issues.
Develop secure configuration baselines, build procedures, automation, scripts, and configuration management processes to improve repeatability and compliance across classified systems.
Support troubleshooting and resolution of complex security and infrastructure issues involving a variety of information systems.
Support the preparation for and execution of government security assessments, authorization reviews, inspections, and audits, including collection and presentation of objective evidence demonstrating control implementation.
Provide technical cybersecurity guidance and mentoring to system administrators, ISSOs, and other program personnel.