Systems Security Analyst

Leidos•San Antonio, TX

About The Position

Leidos is seeking an experienced Systems Security Analyst to support an Air Force Cybersecurity Service Provider (CSSP) mission. The role evaluates system security controls and cybersecurity posture, identifies and mitigates security deficiencies, supports implementation of security requirements, and provides cybersecurity recommendations to Government and technical stakeholders. The analyst applies cybersecurity, information assurance, and risk-management principles to assess system security, support remediation, maintain security documentation, and help ensure appropriate security controls are implemented and operating effectively.

Requirements

Bachelor’s degree in Cybersecurity or a related field; additional experience may be considered in lieu of a degree.
At least 3 years of relevant cybersecurity experience; additional related education or certifications may be considered in lieu of experience.
Current Top Secret/SCI security clearance, with the ability to obtain additional or higher read-ins as required.
Meet DoD 8140 / Defense Cyber Workforce Framework (DCWF) Work Role 511 – Cyber Defense Analyst qualification requirements / IAT Level II certification.
Knowledge of encryption technologies and algorithms, including IPsec, AES, GRE, IKE, MD5, SHA, and 3DES.
Knowledge of cybersecurity principles and organizational requirements related to confidentiality, integrity, availability, authentication, and non-repudiation.
Knowledge of IT security principles and methods, including firewalls, demilitarized zones, and encryption.
Knowledge of network access, identity, and access-management concepts, including Public Key Infrastructure (PKI).
Knowledge of operating systems.
Knowledge of network traffic and communications, including TCP/IP, the OSI model, and ITIL concepts.
Knowledge of how system components are installed, integrated, and optimized.
Knowledge of various computer architectures.
Knowledge of network-design processes, including security objectives, operational objectives, and associated tradeoffs.
Knowledge of network-analysis tools used to identify vulnerabilities.
Skill in designing integration of hardware and software solutions.
Ability to determine how a security system should operate, including resilience and dependability requirements, and assess how changes in conditions, operations, or the environment may affect system-security outcomes.
Skill in developing and applying security-system access controls.
Skill in evaluating and assessing security-system designs.
Skill in assessing security controls based on cybersecurity principles and requirements.

Nice To Haves

CSSP Infrastructure Support certification.
Experience performing ISSO or ISSM functions.
Experience with Cyber Network Defense and Analysis.
Experience with IT security engineering.
Experience with cloud-security engineering.
Agile training or experience.

Responsibilities

Assess the effectiveness of system security controls and apply security policies to meet system security objectives.
Assess configuration-management, change-management, and release-management processes for security impact and compliance.
Develop procedures and support testing of system failover and transfer of operations to alternate sites based on system availability requirements.
Analyze and report organizational and system cybersecurity-posture trends.
Ensure system security operations and maintenance activities are documented and kept current.
Evaluate cybersecurity-enabled products and compensating security controls to determine whether identified risk has been reduced to an acceptable level.
Assess access controls according to least-privilege and need-to-know principles.
Implement security measures to resolve vulnerabilities, mitigate risk, and recommend changes to systems or system components as required.
Implement system security measures under established procedures to support confidentiality, integrity, availability, authentication, and non-repudiation requirements.
Mitigate or correct deficiencies identified during security or certification testing and recommend risk acceptance for consideration by the authorized Government representative when appropriate.
Verify that minimum security requirements are implemented for applications and systems.
Plan and recommend system modifications or security adjustments based on exercise results or changes to the operating environment.
Maintain documentation of system security implementation, operations, and maintenance activities.
Provide leadership with cybersecurity recommendations based on significant threats and vulnerabilities.
Verify and update cybersecurity documentation so it accurately reflects application and system security-design features.
Conduct research and analysis to support cybersecurity performance improvement and mission objectives.
Work independently and collaboratively with project, technical, cybersecurity, and Government stakeholders.
Perform other duties as assigned.