Information Systems Security Engineer

Leidos•Camp Springs, MD

1d•$87,100 - $157,450•Onsite

About The Position

Leidos has a career opportunity for an Information Systems Security Engineer to support the Air Force National Capital Region IT Services program. The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), Joint Chiefs of Staff, and other Air Force activities within the AFNCR, missions to include the Pentagon, Joint Base Andrews (JBA), Joint Base Anacostia-Bolling (JBAB), and other locations, leased spaces, and alternate sites. The major support areas required are IT Operations and Maintenance; Plans, Projects, and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail, resulting in a fast-paced, challenging, but also rewarding environment. The Leidos Digital Group is seeking an ISSE to support a high visible fast paced program. The ISSE will be responsible for assisting with scheduling and running vulnerability scans using Tenable SecurityCenter/Nessus (ACAS) in classified and unclassified environments. Review scan results to help identify potential CAT I/II/III findings, false positives, and basic configuration issues. Identifying hardening requirements that still need to be met and apply those Security Technical Implementations (STIGs). Act as expert for system admins and Engineers to assist thorough the STIG hardening process. Support tracking of remediation actions, Plans of Action and Milestones (POA&Ms), and exceptions in accordance with RMF guidance. Follow established procedures to validate DISA STIG checklists and work with team members to ensure secure system configurations. The Cyber Engineer will be a strategic asset and will be driven to automate network security compliance. This expert will create a direct connection between our network security system and our device management software. The engineer will integrate these systems to give us a single, real-time inventory of all devices that are connected to our network, even when they are off-site.

Requirements

Active DoD Secret clearance required.
CompTIA Security+ CE or higher DoD 8570 IAT Level II certification must meet 8140 ISSM role qualification.
BS Degree and 4-8 years of cybersecurity or system administration experience, with at least 1 year of direct ACAS or Tenable experience.
Working knowledge of DISA STIGs, vulnerability risk levels, and POA&M remediation strategies.
Familiarity with NIST SP 800-53, RMF compliance, and Air Force cybersecurity policy (AFMAN 17-130).
Strong attention to detail, documentation skills, and the ability to interpret technical vulnerability data.

Nice To Haves

Additional education and experience may be considered in lieu of a degree.
Experience supporting USAF, DISA, or other DoD mission systems.
Familiarity with EvaluateSTIG, StigViewer, OpenSCAP, Nessus/ACAS.
Prior involvement in CCRI/CORA preparation or vulnerability remediation campaigns.
Ability to communicate risk-based recommendations to both technical and non-technical stakeholders.
Understanding of automation tools/scripts (e.g., PowerShell, Nessus APIs) to support scan or report optimization.

Responsibilities

Assist with scheduling and running vulnerability scans using Tenable SecurityCenter/Nessus (ACAS) in classified and unclassified environments.
Review scan results to help identify potential CAT I/II/III findings, false positives, and basic configuration issues.
Identify hardening requirements that still need to be met and apply those Security Technical Implementations (STIGs).
Act as expert for system admins and Engineers to assist thorough the STIG hardening process.
Support tracking of remediation actions, Plans of Action and Milestones (POA&Ms), and exceptions in accordance with RMF guidance.
Follow established procedures to validate DISA STIG checklists and work with team members to ensure secure system configurations.
Help prepare basic vulnerability reports, compliance summaries, and metrics to support leadership briefings and inspection readiness (e.g., CCRI/CORA).
Assist in maintaining asset groupings, scan zones, and credentialed scanning configurations as directed by senior analysts.
Coordinate with Queue Managers, ISSOs, and Engineering teams to support the remediation of high-priority vulnerabilities.
Maintain data accuracy within ACAS, including proper tagging and grouping for consistent reporting.
Automate network security compliance.
Create a direct connection between our network security system and our device management software.
Integrate these systems to give us a single, real-time inventory of all devices that are connected to our network, even when they are off-site.