Senior Cyber Security Engineer

Leidos•Chantilly, VA

6d•$131,300 - $237,350

About The Position

Leidos is seeking a Cyber Security InfoSec Engineer to support a 150+ FTE technical development program. This role will focus on Entitlement Programs, IdAM/ICAM, Authentication, Authorization, Attributes, and Digital Policy Management. The Cyber Security Engineer will be responsible for identifying, assessing, exploiting, and reporting risks and vulnerabilities of information systems to provide actionable data to senior decision makers. This includes performing IT security/vulnerability assessments and managing overall network security using relevant hardware and software.

Requirements

Active TS/SCI with Polygraph
Prior experience with programs of similar size and complexity
Experience with the Sponsor and the Sponsor’s mission
Bachelor's degree and 12+ years' experience. Additional experience in lieu of degree.
Demonstrated work experience in cyber security or related IT field
Demonstrated experience performing complex technical tasks with minimal direction
Demonstrated experience designing, testing, or implementing IT security architecture
Demonstrated experience performing network security analysis
Demonstrated experience developing risk management methodologies
Demonstrated experience analyzing test results to develop risk/threat mitigation plans
Demonstrated experience communicating vulnerability results and risk posture to senior executives

Nice To Haves

Certified Information Systems Security Professional (CISSP)
Experience with the Sponsor’s entitlement management programs
PMP, SAFe Agilist Certification, AWS certification

Responsibilities

Identify and define applicable security controls and responses for the project.
Review responses, enter responses into the cyber risk management platform, and update risks.
Identify common controls and draft common control language for the cyber risk management platform.
Perform security maintenance duties, such as performing analyses of vulnerabilities and providing recommended resolutions.
Maintain awareness of system level changes, ensure proper patch levels, and upload cyclic scans to the appropriate repositories.
Achieve and maintain system accreditation, including providing guidance, plans, and evidence and maintaining documentation.
Perform regular reviews, such as audits, and review security test results.
Participate in or lead technical exchange meetings and application review boards and document action items and results.
Brief management on status.