Information Systems Security Engineer

Leidos•Camp Springs, MD

2d•Onsite

About The Position

Leidos is seeking an Information Systems Security Engineer (ISSE) to support the Air Force National Capital Region IT Services program. This program provides critical IT support for various Air Force entities, including Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), and the Joint Chiefs of Staff, across multiple locations such as the Pentagon, Joint Base Andrews (JBA), and Joint Base Anacostia-Bolling (JBAB). The role operates in a fast-paced, challenging, and rewarding environment where mission-critical operations must never fail. Leidos Digital Group offers a wide range of systems, solutions, and services in cybersecurity, enterprise IT, and intelligence analysis for global customers with demanding missions.

Requirements

Active DoD Secret clearance required.
CompTIA Security+ CE or higher DoD 8570 IAT Level II certification must meet 8140 ISSM role qualification.
BS Degree and 4-8 years of cybersecurity or system administration experience, with at least 1 year of direct ACAS or Tenable experience. Additional education and experience may be considered in lieu of a degree.
Working knowledge of DISA STIGs, vulnerability risk levels, and POA&M remediation strategies.
Familiarity with NIST SP 800-53, RMF compliance, and Air Force cybersecurity policy (AFMAN 17-130).
Strong attention to detail, documentation skills, and the ability to interpret technical vulnerability data.

Nice To Haves

Experience supporting USAF, DISA, or other DoD mission systems.
Familiarity with EvaluateSTIG, StigViewer, OpenSCAP, Nessus/ACAS.
Prior involvement in CCRI/CORA preparation or vulnerability remediation campaigns.
Ability to communicate risk-based recommendations to both technical and non-technical stakeholders.
Understanding of automation tools/scripts (e.g., PowerShell, Nessus APIs) to support scan or report optimization.

Responsibilities

Assist with scheduling and running vulnerability scans using Tenable SecurityCenter/Nessus (ACAS) in classified and unclassified environments.
Review scan results to identify potential CAT I/II/III findings, false positives, and basic configuration issues.
Identify hardening requirements and apply Security Technical Implementation Guides (STIGs).
Act as an expert to assist system administrators and engineers with the STIG hardening process.
Support tracking of remediation actions, Plans of Action and Milestones (POA&Ms), and exceptions in accordance with RMF guidance.
Validate DISA STIG checklists and ensure secure system configurations.
Help prepare basic vulnerability reports, compliance summaries, and metrics for leadership briefings and inspection readiness (e.g., CCRI/CORA).
Assist in maintaining asset groupings, scan zones, and credentialed scanning configurations.
Coordinate with Queue Managers, ISSOs, and Engineering teams to support the remediation of high-priority vulnerabilities.
Maintain data accuracy within ACAS, including proper tagging and grouping for consistent reporting.
Automate network security compliance by creating a direct connection between the network security system and device management software.
Integrate systems to provide a single, real-time inventory of all devices connected to the network, including off-site devices.