Information System Security Officer

Leidos currently has an opening for an Information System Security Officer to work in our Columbia, MD office supporting our Intelligence Sector's Cyber & Analytics Business Area (CABA).

We offer competitive benefits, including 4 or more weeks Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more.

This position requires an individual who can work independently and collaboratively in a team-oriented environment. The ISSO will support daily security operations, monitor system compliance, maintain security controls, and ensure information systems meet established security policies and regulatory requirements.

Primary Responsibilities:

• Assist the Information System Security Manager (ISSM) with information assurance efforts, and systems across numerous environments.
• Support continuous monitoring activities, including vulnerability management, configuration compliance, patch coordination, security scan analysis, and verification of remediation efforts.
• Maintain and update security authorization documentation, including System Security Plans, security control narratives, network diagrams, inherited controls, Configuration Management Plans, Incident Response Plans, Contingency Plans, Risk Assessment Reports, Certification and Accreditation packages, and System Requirements Traceability Matrices.
• Collaborate with System Owner, System Administrators, Information System Security Engineer, and other stakeholders to address security concerns, resolve vulnerabilities, maintain system compliance, and support cybersecurity requirements.
• Perform security compliance and vulnerability assessment using tools such as Nessus, Splunk, and Security Content Automation Protocol scanning tools to identify vulnerabilities, assess system compliance, and track remediation efforts.
• Support incident response and reporting, participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learned.

Basic Qualifications:

• Bachelor’s degree is highly desired. In lieu of bachelor’s degree Leidos will consider candidates on a case by case basis and additional experience will be required. High school diploma or equivalent required.
• Minimum of four years of relevant experience in information system security, cybersecurity, system administration, or a related technical field.
• Proficiency in Microsoft Office applications, particularly Word, Excel, and Outlook, for documentation, reporting, and tracking security-related activities.
• Ability to adapt quickly to changing priorities, respond effectively to unexpected changes, and manage multiple tasks in a fast-past environment.
• Understanding of Risk Management Framework, National Institute of Standards and Technology and Committee on National Security Systems cyber security requirements and guidance, cyber security related risk management techniques.
• DoD 8570 compliance with IAM Level I, IAM Level II, or IAT Level III (Security+, SecurityX, CISM, CISSP, or Associate).

Clearance Requirement: Must hold an active TS/SCI with Polygraph

Preferred Qualifications:

• Previous experience in system administration, including system configuration, maintenance, troubleshooting, and security support, is a plus.
• Experience using the Enterprise Mission Assurance Support Service Support Service to support Risk Management Framework activities, security authorization documentation, and compliance tracking.
• Experience with NIST Risk Management Framework, NIST SP 800-53 security controls, and maintaining security authorizations documentation.
• Familiarity with DISA Security Technical Implementation Guides, vulnerability management, and Plan of Action and Milestones tracking and remediation.
• Current DoD 8140.03 compliance with IAT Level I or higher (e.g., Security+, CASP, CISM or CISSP).
• Vulnerability assessment and analysis experience utilizing SCAP, NESSUS and DISA STIGs.

Work Environment: This position requires on-site work five days per week at the Columbia, MD location, with established core business hours from 09:00 a.m. to 3:00 p.m. Local travel between company facilities and customer sites is required to support operational and cybersecurity activities as needed.