# Cyber Security STIG Tester

**Company**: Leidos
**Location**: Ft. Meade, MD
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $107,900.00 - $195,050.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Odenton-MD/Cyber-Security-STIG-Tester_R-00191998?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_48ebff6c-2b3

## Description

We are seeking a Cyber Security STIG Tester to join our GSMO-II team at Ft. Meade, MD. The successful candidate will perform technical security assessments using STIG Checklists, SCAP scans, and ACAS/ESS Scans to identify vulnerabilities and ensure compliance with established Information Assurance guidelines and regulations.

**Responsibilities:**

- Ensure STIG Checklists are up to date and settings are enforced with minimal operational impact for all systems within the environment.

- Support systems within GMS to have an up to date and complete STIG Checklist.

- Examine results of STIG testing and pass results to system owners and system administrators.

- Track response times to STIG findings and report on the security briefing.

- Support POA&M analysis and coordination efforts, as required.

- Perform cybersecurity lab testing/hardening activities supporting deployment of/updates to computer systems and applications.

- Review data from ACAS/ESS scans and set tickets to add new equipment into scans as necessary.

- Maintain SOP’s for testing and reporting activities.

- Support functional testing as necessary for new technology.

- Perform vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.

- Support Authorizing Official (AO) actions by ensuring all testing related security testing artifacts are presented in accordance with RMF.

**Requirements:**

- Bachelor’s degree and 8+ years of experience.

- Prior relevant experience working with STIG Compliance, SCAP tools, vulnerability assessments and reporting.

- Experience performing various types of vulnerability and assessment scans with multiple tools.

- Experience using eMASS and/or Xacta.

- Solid understanding of the Risk Management Framework (RMF) and the System Development Life Cycle (SDLC).

- Understanding of hardware and software engineering best practices.

- Demonstrated analytical and problem-solving skills.

- Current DoD 8570 IAT II Certification is required.

**Preferred Qualifications:**

- Ability to identify needed changes to processes and activities and help to implement continuous improvement solutions.

- ACAS training completed.

- Ability to work successfully as part of a virtual team.

**Salary:** $107,900.00 - $195,050.00

## Skills

### Required
- STIG Compliance
- SCAP tools
- vulnerability assessments
- reporting
- eMASS
- Xacta
- Risk Management Framework
- System Development Life Cycle

### Nice to have
- continuous improvement
- ACAS training
- virtual team collaboration

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Odenton-MD/Cyber-Security-STIG-Tester_R-00191998?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)