Senior Cyber Security Engineer

Leidos•9479 Undisclosed MD Customer Site, MD

2d•$131,300 - $237,350

About The Position

The Senior Cyber Security Engineer will join a small team providing Information Assurance (IA) architecture analysis and security engineering support for implementation and fielding of the National Leadership Command Capability, supporting Nuclear Command, Control, and Communications (NC3), Continuity of Government (COG), and senior leader communications. The role serves in a consultant-like capacity, providing technical knowledge, expertise, and advice to the customer. The engineer leads and delivers threat-informed cybersecurity products, including cybersecurity risk assessments, architecture reviews, and engineering guidance. The work supports mission partners by providing accurate, timely, and actionable security services, from assessing architectures and mitigating risk to developing and implementing security solutions and reviewing certification and accreditation documentation.

Requirements

Active TS/SCI clearance with polygraph.
Bachelor of Science degree from an accredited university, ideally in Computer Science, Information Assurance, Information Security System Engineering, or a related field.
At least 14 years of experience as an Information Systems Security Engineer (ISSE) or System Engineer on programs and/or contracts in the customer space.
CISSP or CASP certification.
Strong writing skills.
Confidence and ability to brief senior-level DoD officials in prepared briefings and/or ad hoc discussions.
Expertise in the Risk Management Framework (RMF) and conducting cybersecurity risk assessments.
Expertise in network technology and systems security engineering.
Experience identifying, researching, characterizing, and documenting security weaknesses related to operating systems, software applications, firmware, network hardware components, and network architecture design, to identify protection needs and documented policies and procedures.
Experience developing and documenting system security requirements and conducting requirements gap analysis.
Experience with security monitoring and incident response capabilities.
Knowledge of and practical experience with the NIST Special Publications 800 Series, CNSSI 1253, and DoD 8500.
Ability to work independently within a schedule and with little direction.

Nice To Haves

Experience with emerging technologies such as Zero Trust and cloud computing.

Responsibilities

Conduct cybersecurity risk assessments and provide prioritized risk mitigation recommendations in support of the customer’s mission.
Support the design, implementation, and operation of real-time capabilities to discover, detect, analyze, and mitigate threats and vulnerabilities.
Evaluate candidate architectures against defined security requirements, identify security gaps, and recommend mitigation strategies.
Research and evaluate emerging technologies to determine their cybersecurity effectiveness.
Aid stakeholders in developing, refining, delivering, and implementing innovative solutions and capabilities.
Engage stakeholders to define security objectives, protection needs, security requirements, and associated validation methods.
Validate and verify system security requirements definitions and analysis, and establish system security design.
Design, develop, implement, and/or integrate IA and security systems and components for networking, computing, and enclave environments, including environments with multiple enclaves and differing data protection or classification requirements.
Assist architects and systems developers in identifying and implementing information security functionality to ensure uniform application of Agency security policy and enterprise solutions.
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
Review certification and accreditation (C&A) documentation and provide feedback on its completeness and compliance.