Cyber Security InfoSec Engineer - SC-51

Leidos • Undefined, VA

1d

About The Position

Leidos is seeking a senior Information Systems Security Engineer (ISSE) for a technical development program supporting cloud-based applications and associated infrastructure on a highly secure network. The ISSE will work with developers, system engineers, DevOps engineers, database administrators, and system architects. Team core business hours are 9 AM to 3 PM daily; exceptions outside those hours may be negotiated with management.

The role participates in Agile scrum meetings and reports on assigned Jira issues; joins technical exchange meetings (TEMs) to assess security impacts of system architecture and planned changes; assists with or leads security scans; analyzes findings and vulnerabilities, including CVEs; and advises on remediation. The ISSE also supports secure architecture and design, security requirements across the SDLC, continuous monitoring, and Assessment and Authorization (A&A) activities for a 100% AWS cloud-based system.

Requirements

• 6–10 years of experience.
• Active TS/SCI with Polygraph clearance.
• Typically requires a Bachelor of Science degree or relevant demonstrable experience.
• Hands-on experience with Linux command-line interfaces.
• Hands-on experience with scripting and programming languages such as BASH and Python.
• Solid understanding of networking, including ports, routing tables, subnets, VPNs, firewalls, and routers, with experience in design, integration, and troubleshooting.
• Experience working on teams using Agile workflows and processes.
• Strong understanding of NIST SP 800-37, NIST SP 800-53, NIST SP 800-160, DISA/CIS STIGs, and Common Vulnerabilities and Exposures (CVEs).
• Experience with RMF workflow tools.
• Strong communication, organizational, and writing skills.
• Ability to clearly and directly articulate findings and recommendations.
• Openness to considering alternative approaches to security issues raised by other team members.

Nice To Haves

• Relevant IT certifications, such as CISSP, AWS Cloud Practitioner, AWS Cloud Security, or AI security certifications.
• Experience with Infrastructure as Code (IaC) solutions such as Ansible or Terraform, or other configuration and automation tools.
• Experience working in a cloud-based AWS environment.

Responsibilities

• Identify, select, implement, and assess NIST SP 800-53 security and privacy controls.
• Develop, establish, and integrate secure configuration baselines in accordance with DISA STIGs and CIS benchmark guidelines.
• Participate in creating secure architectures and designs.
• Ensure security requirements are integrated into the System/Software Development Life Cycle (SDLC).
• Perform Continuous Monitoring (ConMon) activities to support Assessment and Authorization (A&A) requirements.
• Review, create, and maintain relevant A&A artifacts.
• Perform security analysis and monitoring of a 100% AWS cloud-based system.
• Perform vulnerability scanning and analyze the system.
• Remediate security findings and develop security implementations based on those findings.
• Interface with Information System Security Managers (ISSMs) to develop and accredit the system.
• Participate in or lead technical exchange meetings, document meeting outcomes as needed, and brief management.
• Participate in Agile scrum meetings and report the status of assigned Jira issues.
• Review CVEs and other security findings for system impact and recommend how to address them.
• Assess the security impacts of architectural decisions, system changes, and new features.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior