Information System Security Engineer (ISSE)

Leidos•Bay St. Louis, MS

2d•$107,900 - $195,050•Onsite

About The Position

Leidos Undersea Systems Division (USD) is seeking a proactive and experienced Information System Security Engineer (ISSE) to serve as the subject matter expert for critical IT systems at Stennis Space Center, MS. The primary focus of this position is to design, develop, and implement secure information systems. The ISSE collaborates with engineers and developers to integrate robust security measures into systems, ensuring they are resilient against threats and vulnerabilities. This role requires a deep understanding of security engineering principles and a proactive approach to risk management throughout the system lifecycle. The successful candidate will be a self-starter, comfortable with extensive travel, and capable of thriving in dynamic and physically demanding environments.

Requirements

BS degree and 8 – 12 years of prior relevant experience
Must have an active TS/SCI clearance.
Proven experience in a hybrid role combining system administration with information assurance.
Demonstrated experience as an ISSE/ISSM/ISSO/SCA.
Experience creating documentation to obtain and maintain an ATO.
Proficiency with STIGs and SCAP tools for configuration tracking and compliance.
Deep understanding of the Navy Risk Management Framework (RMF) process.
Comfortable working on multiple systems and components simultaneously in various configurations.
Holds one or more of the following certifications: Security+, CISSP, CISM, CAP, ISSEP.
Ability to work independently with minimal supervision.
Excellent communication skills, with the ability to translate complex IA concepts for various audiences.
Must be a US citizen.
Must possess a valid US passport and be willing to travel extensively.

Responsibilities

Perform and review technical security assessments to identify vulnerabilities and ensure compliance with information assurance (IA) standards and regulations.
Validate and verify system security requirements, establish system security designs, and integrate system security capabilities for various environments.
Build cybersecurity into systems deployed to operational environments, ensuring uniform application of security policies and enterprise solutions.
Assess and mitigate system security threats and risks throughout the program life cycle, contributing to security planning, assessment, risk analysis, and risk management.
Apply system security engineering expertise in areas such as system security design, life cycle, risk management, and security testing, using industry system security engineering methodologies.
Enforce the design and implementation of trusted relations among external systems and architectures and manage changes to systems while assessing security impact.
Support security authorization activities in accordance with Government regulations, Department of Defense and National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) standards, and customer-specific information security policies, processes, and procedures.
Create, manage, and maintain all necessary documentation required to obtain and maintain a system's Authority to Operate (ATO).
Ensure all evidence is accurately captured for ATO requests and extensions.
Identify, track, and manage all configuration changes.
Implement and validate system security controls using Security Technical Implementation Guides (STIGs) and the Security Content Automation Protocol (SCAP) to ensure compliance.
Conduct field maintenance and system grooming to ensure optimal performance.
Assist with installations and testing as needed.