Information Assurance Security Engineer (IASE) Information Systems Security Engineer (ISSE)
Job Location:
Suitland, MD - USA
Monthly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)
Location: Suitland MD
Clearance: Active TS/SCI
Leidos is hiring a hands-on Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE) to support a complex mission-driven enterprise environment in Suitland MD.
In this engineering-focused role you will actively secure administer harden and maintain critical systems and infrastructure while collaborating across network systems cybersecurity and architecture teams to continuously strengthen and evolve the organizations overall security posture. You will combine deep technical security expertise with hands on engineering vulnerability remediation security testing and architecture support to help protect mission critical systems and capabilities.
This posting is for multiple opportunities ranging in years of experience. Level of opportunity including compensation will be matched to a candidates experience.
Responsibilities
- Serve as a primary security engineering resource for enterprise infrastructure providing hands on administration configuration security hardening troubleshooting and vulnerability remediation.
- Research and evaluate cybersecurity tools technologies and methodologies to identify opportunities to strengthen enterprise security.
- Participate in architecture and engineering reviews and provide security recommendations for new capabilities technologies and infrastructure changes.
- Troubleshoot complex security issues across storage networking operating systems authentication and enterprise infrastructure.
- Conduct vulnerability assessments ethical hacking and penetration testing to identify and address security risks.
- Review and harden storage protocols and services including NFS SMB/CIFS iSCSI and management interfaces based on operational and security requirements.
- Apply and validate applicable DISA Security Technical Implementation Guides (STIGs) Security Requirements Guides (SRGs) vendor security guidance and industry security best practices.
- Configure and maintain secure administrative access using technologies and principles such as SSH HTTPS/TLS role based access control (RBAC) centralized authentication and least privilege.
- Develop and deliver training on cybersecurity tools technologies and processes.
Required Qualifications
- Bachelors degree in Cybersecurity Electrical Engineering Information Technology Information Assurance or a related field with 8 or 12 years of experience; Masters degree with 8 or 10 years of experience. Additional relevant experience may be considered in lieu of a degree.
- Active TS/SCI security clearance.
- 8 years of security engineering experience including experience with DoD RMF ICD 503 and/or the NIST Risk Management Framework.
- Extensive experience with Intelligence Community (IC) Department of Defense (DoD) Defense Information Systems Agency (DISA) NAVINTEL Cybersecurity Fleet Cyber Command (FLTCYBERCOM) and DoDIIS processes tools systems reporting mechanisms and requirements supporting Assessment and Authorization (A&A).
- 5 years of software development experience using Java C C or other programming or scripting languages including experience designing and developing host based and network based scanning tools.
- Experience with Security Content Automation Protocol (SCAP) based tools and specifications.
- Experience installing configuring testing deploying operating and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS ACAS RedSeal Evaluate STIG SteelCloud ConfigOS and STIG Manager.
- Extensive experience hardening modern Unix operating systems such as Oracle Solaris 10/11 and RHEL as well as Microsoft Windows environments using Security Technical Implementation Guides (STIGs).
- Extensive experience securing systems and software in accordance with IC DoD and industry security best practices.
- Experience developing security controls testing methodologies and test procedures for systems cloud based architectures and Cross Domain Solutions (CDS).
- 2 years of project management experience.
- Demonstrated ability to take a proactive results oriented approach while building effective customer and team relationships.
Required Certifications
- Active IAT or IAM Level III DoD 8140 approved baseline certification such as CISSP ISSEP or SecurityX or the ability to obtain the required certification within 30 days of hire.
NITESONI
DABAOPP1
If youre looking for comfort keep scrolling. At Leidos we outthink outbuild and outpace the status quo because the mission demands it. Were not hiring followers. Were recruiting the ones who disrupt provoke and refuse to fail. Step 10 is ancient history. Were already at step 30 and moving faster than anyone else dares.
For U.S. Positions: While subject to change based on business needs Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.
Required Experience:
IC
About Company
Leidos is an innovation company rapidly addressing the world's most vexing challenges in national security and health. Our 47,000 employees collaborate to create smarter technology solutions for customers in these critical markets.
