Sr. Information System Security Professionals (ISSO)

Leidos•Bowie, MD

23h•Onsite

About The Position

Leidos' Defense is seeking a Sr. Information System Security Officer (ISSO) ISSE to join their team in Bowie, MD. The candidate will be part of a cyber and IT team responsible for the design, deployment, maintenance, configuration management, monitoring, and troubleshooting of an expanding wide area network supporting a multi-site secure network. The role requires the ability to work at various support levels, from IT system administration tickets to installation, configuration, and troubleshooting of Linux workstations and servers. The position involves providing updates to the ISSM for strategic planning, managing risks for PC workstations and peripherals, and potentially traveling to regional sites. Leidos Defense Systems Sector offers a diverse portfolio of systems, solutions, and services for customers worldwide, focusing on solving tough security challenges for critical missions.

Requirements

BS degree and 8+ years of prior relevant experience. Candidates with out Bachelors Degrees will be considered on a case by case basis and will be required to have an additional years of related information security experience.
Active DoD Secret Clearance
Linux experience (RHSCE certification)
Conduct security and risk assessments using security frameworks (e.g., NIST, RMF, Common Criteria, etc.)
Mitigate risk via security controls, testing and evaluation to certify and accredit commercial security products, ensuring privacy of data throughout its life-cycle.
Vulnerability management.
Business continuity and disaster recovery

Responsibilities

Coordinate with ISSM for security relevant changes.
Conduct analysis of the Security Impact Analysis of changes to the Linux environments / ATO.
Evaluate configuration management (CM) for information system security software, hardware, and firmware.
Perform and review technical security assessments to identify vulnerabilities and ensure compliance with information assurance (IA) standards and regulations.
Validate and verify system security requirements, establish system security designs, and integrate system security capabilities for various environments.
Build cybersecurity into systems deployed to operational environments, ensuring uniform application of security policies and enterprise solutions.
Assess and mitigate system security threats and risks throughout the program life cycle, contributing to security planning, assessment, risk analysis, and risk management.
Apply system security administration expertise in areas such as system security design, life cycle, risk management, and security testing, using industry security engineering methodologies.
Support security authorization activities in accordance with Government regulations, Department of Defense and National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) standards, and customer-specific information security policies, processes, and procedures.