Description
Leidos is seeking a hands-on Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE) to support a complex, mission-driven enterprise environment in Suitland, MD.
In this engineering-focused role, you will actively secure, administer, harden, and maintain critical systems and infrastructure while collaborating across network, systems, cybersecurity, and architecture teams to continuously strengthen and evolve the organization's overall security posture.
Primary Responsibilities
- Serve as a primary security engineering resource for enterprise infrastructure, providing hands-on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.
- Research and evaluate cybersecurity tools, technologies, and methodologies to identify opportunities to strengthen enterprise security.
- Participate in architecture and engineering reviews and provide security recommendations for new capabilities, technologies, and infrastructure changes.
- Troubleshoot complex security issues across storage, networking, operating systems, authentication, and enterprise infrastructure.
- Conduct vulnerability assessments, ethical hacking, and penetration testing to identify and address security risks.
- Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and management interfaces, based on operational and security requirements.
- Apply and validate applicable DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), vendor security guidance, and industry security best practices.
- Configure and maintain secure administrative access using technologies and principles such as SSH, HTTPS/TLS, role-based access control (RBAC), centralized authentication, and least privilege.
- Develop and deliver training on cybersecurity tools, technologies, and processes.
Required Qualifications
- Bachelor's degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or a related field with 8+ or 12+ years of experience; Master's degree with 6+ or 10+ years of experience.
- Active TS/SCI clearance in DISS and required program access.
- 8+ years of security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.
- Extensive experience with Intelligence Community (IC), Department of Defense (DoD), Defense Information Systems Agency (DISA), NAVINTEL Cybersecurity, Fleet Cyber Command (FLTCYBERCOM), and DoDIIS processes, tools, systems, reporting mechanisms, and requirements supporting Assessment and Authorization (A&A).
- 5+ years of software development experience using Java, C, C++, or other programming or scripting languages, including experience designing and developing host-based and network-based scanning tools.
- Experience with Security Content Automation Protocol (SCAP) based tools and specifications.
- Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network-based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.
- Extensive experience hardening modern Unix operating systems, such as Oracle Solaris 10/11 and RHEL, as well as Microsoft Windows environments using Security Technical Implementation Guides (STIGs).
- Extensive experience securing systems and software in accordance with IC, DoD, and industry security best practices.
- Experience developing security controls, testing methodologies, and test procedures for systems, cloud-based architectures, and Cross Domain Solutions (CDS).
- 2+ years of project management experience.
- Demonstrated ability to take a proactive, results-oriented approach while building effective customer and team relationships.
Required Certifications
- Active IAT or IAM Level II/III DoD 8140 approved baseline certification, such as CISSP ISSEP or SecurityX, or the ability to obtain the required certification within 30 days of hire.
Pay Range: $107,900.00 - $195,050.00