Sr. ISSE TS/SCI Polygraph

Leidos•Annapolis Junction, MD

About The Position

Leidos is hiring a Senior Information System Security Engineer in its Intel Sector's Cyber & Analytics Business Area to support a fast-paced, complex program. The team uses the Scaled Agile Framework (SAFe), follows DevOps practices, and maintains development, test, integration, and production environments while supporting an ongoing operational system and introducing new technology and capabilities. The role supports system security architecture and cybersecurity capabilities, Risk Management Framework (RMF) plans, cross-domain capabilities, and security verification testing of relevant Type 1 devices. Candidates must have an active TS/SCI Polygraph before starting; exceptions are not available. The position requires a solid understanding of security practices and policies, hands-on vulnerability testing experience, and the ability to work across multiple systems and components in varied configurations. The role collaborates with systems engineering, test engineering, integration, development teams, program managers, customer technical representatives, and internal experts.

Requirements

Active TS/SCI Polygraph is required up front; no exceptions.
Master's degree and 15–20 years of prior relevant experience.
Solid understanding of security practices and policies, with hands-on vulnerability testing experience using customer tools.
Experience applying the Risk Management Framework.
Experience formulating and assessing IT security policy.
Knowledge of and experience with common security tools such as Nessus, NMAP, and Wireshark.
Knowledge of hardware and software security implementation, communication protocols, encryption techniques and tools, and web services.
Experience securely configuring commonly used desktop and server operating systems.
Ability to work on multiple systems and components simultaneously in varied configurations.
Strong verbal and written communication skills.
Commitment to adopting and adhering to best practices.
Ability to plan and prioritize tasks effectively and clearly communicate technical options and trade-offs.
Ability to produce high-quality work independently and collaboratively in a fast-moving environment.

Nice To Haves

Five years of experience with Defense in Depth principles and technology, including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture, and applying risk assessment methodology to system development.
DoD 8570 compliance with IASAE Level 2 or 3.
Information Systems Security Engineering Professional (ISSEP) certification.
Computer Information Systems Security Professional (CISSP) certification.
Experience developing or implementing integrated security services management processes, such as network penetration-testing assessment and auditing, antivirus planning assistance, risk analysis, and incident response.
Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls encompassing development, design, and implementation.
Experience with penetration-testing tools.
Experience with scripting languages.

Responsibilities

Validate and verify system security requirements and establish security designs for large-scale systems, major system elements, and interfacing systems in geographically distributed network environments.
Identify and implement information security architectures and functionality that ensure consistent application of security policy and enterprise solutions.
Recommend and develop technical solutions, products, and standards based on current and desired system security architecture.
Assess and mitigate system security threats and risks throughout the program life cycle.
Lead or contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and network operations.
Collaborate with internal technical experts and communicate significant security issues to program managers and customer points of contact when necessary.
Participate in Program Increment Planning and related agile team activities.
Work with systems engineering, test engineering, and integration teams to ensure hardware and software architecture and implementation meet security requirements.
Assess system implementations against security compliance policies and recommend and implement enhancements.
Evaluate security solutions against customer requirements for information processing and assess the impact of new development on operational security.
Evaluate, review, and test critical software.
Propose, assess, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
Audit and assess system security configuration settings using common methodologies and tools.
Manage and enforce security strategies and policies across components of geographically distributed systems.
Provide configuration management for security-relevant information system software.
Serve as a security architecture subject matter expert and advise program managers, customer technical experts, and internal program teams.
Formulate security compliance requirements for new system features and identify and remediate system security issues.
Support risk assessment, risk management, security control assessment, continuous monitoring, service design, and other information assurance program functions.
Help development teams understand vulnerabilities, attack vectors, and remediation approaches.
Plan and conduct security verification testing of relevant Type 1 devices.