Systems Security Analyst

Leidos•San Antonio, TX

3d•$69,550 - $125,725

About The Position

Leidos is seeking an experienced Systems Security Analyst to support an Air Force Cybersecurity Service Provider (CSSP) mission. The analyst assesses system security controls and cybersecurity posture, identifies and mitigates security deficiencies, supports implementation of security requirements, and provides cybersecurity recommendations to Government and technical stakeholders. The successful candidate applies cybersecurity, information assurance, and risk-management principles to evaluate system security, support remediation, maintain security documentation, and ensure security controls are implemented and operating effectively. The role involves working independently and collaboratively with project, technical, cybersecurity, and Government stakeholders, along with performing other duties as assigned.

Requirements

Bachelor’s degree in Cybersecurity or a related field; additional experience may be considered in lieu of a degree.
At least 3 years of relevant cybersecurity experience; additional related education or certifications may be considered in lieu of experience.
Current Top Secret/SCI security clearance, with ability to obtain additional or higher read-ins as required.
Meet DoD 8140 / Defense Cyber Workforce Framework (DCWF) Work Role 511 – Cyber Defense Analyst qualification requirements / IAT Level II certification.
Knowledge of encryption technologies and algorithms, including IPsec, AES, GRE, IKE, MD5, SHA, and 3DES.
Knowledge of cybersecurity principles and organizational requirements related to confidentiality, integrity, availability, authentication, and non-repudiation.
Knowledge of IT security principles and methods, including firewalls, demilitarized zones, and encryption.
Knowledge of network access, identity, and access-management concepts, including Public Key Infrastructure (PKI).
Knowledge of operating systems, network traffic and communications (including TCP/IP and the OSI model), and ITIL concepts.
Knowledge of how system components are installed, integrated, and optimized, and of various computer architectures.
Knowledge of network-design processes, including security objectives, operational objectives, and associated tradeoffs.
Knowledge of network-analysis tools used to identify vulnerabilities.
Skill in designing integration of hardware and software solutions.
Ability to determine how a security system should operate, including resilience and dependability requirements, and assess how changes in conditions, operations, or the environment may affect system-security outcomes.
Skill in developing and applying security-system access controls.
Skill in evaluating and assessing security designs and assessing security controls based on cybersecurity principles and requirements.

Nice To Haves

CSSP Infrastructure Support certification.
Experience performing ISSO or ISSM functions.
Experience with Cyber Network Defense and Analysis.
Experience with IT security engineering.
Experience with cloud-security engineering.
Agile training or experience.

Responsibilities

Assess the effectiveness of system security controls and apply security policies to meet system security objectives.
Assess configuration, change, and release-management processes for security impact and compliance.
Develop procedures and support testing of system failover and transfer of operations to alternate sites based on system availability requirements.
Analyze and report organizational and system cybersecurity-posture trends.
Ensure system security operations and maintenance activities are documented and updated as required.
Evaluate cybersecurity-enabled products and compensating security controls to determine whether identified risk has been reduced to an acceptable level.
Assess access controls based on least privilege and need-to-know principles.
Implement security measures to resolve vulnerabilities, mitigate risk, and recommend changes to systems or system components as required.
Implement system security measures in accordance with established procedures to support confidentiality, integrity, availability, authentication, and non-repudiation requirements.
Mitigate or correct security deficiencies identified during security or certification testing and recommend risk acceptance for consideration by the authorized Government representative.
Verify that minimum security requirements are implemented for applications and systems.
Plan and recommend system modifications or security adjustments based on exercise results or changes to the operating environment.
Maintain documentation of system security implementation, operations, and maintenance activities.
Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
Verify and update cybersecurity documentation to accurately reflect application and system security-design features.
Conduct research and analysis to support cybersecurity performance improvement and mission objectives.
Work independently and collaboratively with project, technical, cybersecurity, and Government stakeholders.
Perform other duties as assigned.