Information Systems Security Engineer (ISSE) SME

Leidos•McLean, VA

7d•$154,050 - $278,475

About The Position

Leidos is hiring an Information Systems Security Engineer (ISSE) SME in its Intel Sector’s Analysis Solutions Business Area. The role designs, develops, and implements secure information systems that support mission operations. The ISSE works with information systems security managers, software developers, systems engineers, and government stakeholders to integrate security controls and help systems remain resilient against evolving threats and vulnerabilities. The position installs and maintains security scanning tools, performs vulnerability assessments, reviews scan results, and supports remediation of security risks. It also integrates security tools and controls into DevSecOps CI/CD pipelines to enable continuous security testing and monitoring throughout the system lifecycle. The ISSE supports Risk Management Framework authorization and Authority to Operate activities, including reviewing security documentation, advising stakeholders on risk posture, and tracking Plans of Action and Milestones for customer-sponsored systems. The role requires an active TS/SCI with a polygraph and a master’s degree with 15 or more years of relevant experience; additional experience may substitute for a degree. The stated pay range is $154,050 to $278,475. Leidos describes the range as a general guideline, not a guarantee of compensation.

Requirements

Master’s degree and 15 or more years of prior relevant experience; additional years of experience may be substituted in lieu of a degree.
Active TS/SCI with a polygraph.
Experience conducting routine vulnerability scans, providing formal and informal reports to technical teams, and tracking remediation activities.
Experience reviewing security bulletins, threat intelligence, and vulnerability advisories.
Experience monitoring system and network security using SIEM tools.
Experience investigating and responding to cybersecurity incidents, including system or network breaches and malware attacks.
Experience tracking CVEs and mapping them to internal controls and remediation strategies.
Experience auditing systems for compliance with secure configuration baselines and cybersecurity policies.
Experience using at least two vulnerability scanning tools, such as AWS Inspector, Tenable Security Center, Rapid7 Nexpose, SonarQube, Fortify, or OWASP security tools.
At least one certification: CISSP, Splunk, Network+, Security+, OSCP, CEH, CASP+, or ISSEP.

Nice To Haves

Experience with Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools.
Experience using Splunk, including creating dashboards and security monitoring visualizations.
Familiarity with cloud platforms such as AWS, Oracle Cloud, or Google Cloud Platform (GCP).

Responsibilities

Apply system security engineering principles to system security design, lifecycle engineering, authentication and authorization, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control.
Conduct or support technical cybersecurity assessments and security audits.
Coordinate with cybersecurity personnel and recommend risk mitigation strategies.
Identify system vulnerabilities and instances of non-compliance with cybersecurity standards and regulatory requirements.
Perform vulnerability scans using approved customer tools and generate reports on findings and remediation progress.
Work with DevSecOps teams to review vulnerability scan results and support remediation of security findings.
Install, configure, and maintain security scanning and monitoring tools, and integrate them into system environments and DevSecOps pipelines.
Support RMF authorization by reviewing security documentation and providing risk-based recommendations about system risk posture during ATO activities.
Manage and track POA&Ms for customer-sponsored systems, coordinating with ISSOs, ISSEs, ISSMs, and Security Control Assessors.
Monitor systems and networks using SIEM tools, investigate and respond to cybersecurity incidents, and track CVEs against internal controls and remediation strategies.
Review security bulletins, threat intelligence, and vulnerability advisories to stay informed about current threats and attack techniques.
Audit systems for compliance with secure configuration baselines and cybersecurity policies.