Description
Leidos has a new and exciting opportunity for a Sr. Information System Security Engineer in our Intel Sector's Cyber & Analytics Business Area (CABA).
You will provide support for adding new capabilities to a complex system with exacting interface, performance and security requirements.
Responsibilities:
- Validating and verifying system security requirements and establishing system security designs for large-scale systems
- Identifying and implementing appropriate information security architectures and functionality
- Recommending and developing technical solutions, products, and standards based on current and desired system security architecture
- Assessing and mitigating system security threats and risks throughout the program life cycle
- Leading and/or contributing to the security planning, assessment, risk analysis, risk management, certification and awareness activities for various system and networking operations
- Effectively collaborating with other internal technical experts on a day-to-day basis
- Communicating with Program Managers and POCs from customer organizations when necessary, regarding Security issues of significant importance
- Participating in Program Increment Planning and related agile team activities
- Working closely with System Engineering, Test Engineering, and Integration teams to ensure that the hardware and software architecture and implementation meets security requirements
- Analyzing and assessing system implementation against multiple security compliance policies and recommending and implementing enhancements
- Evaluating security solutions to ensure they meet customer specified requirements for processing information
- Evaluating the impact of new development on the operational security posture of the system
- Evaluating, reviewing, and testing critical software
- Proposing, assessing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
- Auditing and assessing system security configuration settings using common methodologies and tools
- Managing and enforcing security strategies and policies that effect various components of geographically distributed systems
- Providing configuration management for security-relevant information system software
- Serving as a subject matter expert in security architecture to include providing advice to Program Managers, Customer technical experts, and internal program teams
- Formulating security compliance requirements for new system features
- Identifying and remediating security issues throughout the system
- Supporting risk assessment, risk management, security control assessment, continuous monitoring, service design, and other IA program support functions
- Working with development teams to enrich team-wide understanding of different types of vulnerabilities, attack vectors and remediation approaches
- Planning and conducting security verification testing of relevant type 1 devices.
Basic Qualifications:
- Bachelor’s degree and 12 years of relevant experience
- Solid understanding of security practices and policies and hands-on vulnerability testing experience
- Experience applying Risk Management Framework
- Experience formulating and assessing IT security policy
- Demonstrated knowledge of and experience with common security tools, such as Nessus, NMAP and Wireshark
- Experience with secure configurations of commonly used desktop and server operating systems
- Strong verbal and written communications skills
- Ability to effectively plan and prioritize tasking and communicate clearly regarding technical options and trade-offs
Preferred Qualifications:
- Five (5) years of experience with Defense in Depth Principals/technology
- DoD 8570 compliance with IASAE Level 2 or 3
- Information Systems Security Engineering Professional (ISSEP) Certification
- Computer Information Systems Security Professional (CISSP) Certification
- Experience developing/implementing integrated security services management processes
- Experience providing information assurance support for application development
- Experience with penetration testing tools
- Experience with scripting languages
The position offers a competitive salary range of $131,300.00 - $237,350.00.