Information Systems Security Officer

Leidos•Columbia, MD

1d•$87,100 - $157,450•Onsite

About The Position

Leidos currently has an opening for an Information System Security Officer to work in our Columbia, MD office supporting our Intelligence Sector's Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. This position requires an individual who can work independently and collaboratively in a team-oriented environment. The ISSO will support daily security operations, monitor system compliance, maintain security controls, and ensure information systems meet established security policies and regulatory requirements. We are seeking a motivated, detail-oriented Information System Security Officer (ISSO) to join our cybersecurity team. The ideal candidate will have prior experience in information systems security, system administration, or a related technical field, along with strong communication, analytical, organizational, and problem-solving skills.

Requirements

Bachelor’s degree is highly desired. In lieu of bachelor’s degree Leidos will consider candidates on a case by case basis and additional experience will be required. High school diploma or equivalent required.
Minimum of four (4) years of relevant experience in information system security, cybersecurity, system administration, or a related technical field.
Proficiency in Microsoft Office applications, particularly Word, Excel, and Outlook, for documentation, reporting, and tracking security-related activities.
Ability to adapt quickly to changing priorities, respond effectively to unexpected changes, and manage multiple tasks in a fast-past environment.
Understanding of Risk Management Framework (RMF), National Institute of Standards and Technology (NIST) and Committee on National Security Systems (CNSS) cyber security requirements and guidance, cyber security related risk management techniques.
Certifications & Compliance: DoD 8570 compliance with IAM Level I, IAM Level II, or IAT Level III (Security+, SecurityX, CISM, CISSP, or Associate).
Must hold an active TS/SCI with Polygraph

Nice To Haves

Previous experience in system administration, including system configuration, maintenance, troubleshooting, and security support, is a plus.
Experience using the Enterprise Mission Assurance Support Service Support Service (eMass) to support Risk Management Framework (RMF) activities, security authorization documentation, and compliance tracking.
Experience with NIST Risk Management Framework (RMF), NIST SP 800-53 security controls, and maintaining security authorizations documentation.
Familiarity with DISA Security Technical Implementation Guides (STIGs), vulnerability management, and Plan of Action and Milestones (POA&M) tracking and remediation.
Current DoD 8140.03 compliance with IAT Level I or higher (e.g., Security+, CASP, CISM or CISSP).
Vulnerability assessment and analysis experience utilizing SCAP, NESSUS and DISA STIGs.

Responsibilities

Assist the Information System Security Manager (ISSM) with information assurance efforts, and systems across numerous environments.
Support continuous monitoring activities, including vulnerability management, configuration compliance, patch coordination, security scan analysis, and verification of remediation efforts.
Maintain and update security authorization documentation, including System Security Plans, (SSPs), security control narratives, network diagrams, inherited controls, Configuration Management (CM) Plans, Incident Response Plan (IRPs), Contingency Plan (CPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
Collaborate with System Owner, System Administrators, Information System Security Engineer (ISSE), and other stakeholders to address security concerns, resolve vulnerabilities, maintain system compliance, and support cybersecurity requirements.
Perform security compliance and vulnerability assessment using tools such as Nessus, Splunk, and Security Content Automation Protocol (SCAP) scanning tools to identify vulnerabilities, assess system compliance, and track remediation efforts.
Support incident response and reporting participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learned.