Information Systems Security Officer

Leidos currently has an opening for an Information System Security Officer to work in our Columbia MD office supporting our Intelligence Sectors Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering Computer Network Operations (CNO) Mission Software Analytical Methods and Modeling Signals Intelligence (SIGINT) and Cryptographic Key Management.

At Leidos we offer competitive benefits Leidos Pay and Benefits including 4 or more weeks Paid Time Off 11 paid Holidays 401K with a 6% company match and immediate vesting Flexible Schedules Discounted Stock Purchase Plans Technical Upskilling Education and Training Support Parental Paid Leave and much more. Join us and make a difference in National Security!

This position requires an individual who can work independently and collaboratively in a team-oriented environment. The ISSO will support daily security operations monitor system compliance maintain security controls and ensure information systems meet established security policies and regulatory requirements. We are seeking a motivated detail-oriented Information System Security Officer (ISSO) to join our cybersecurity team. The ideal candidate will have prior experience in information systems security system administration or a related technical field along with strong communication analytical organizational and problem-solving skills.

Primary Responsibilities:

• Assist the Information System Security Manager (ISSM) with information assurance efforts and systems across numerous environments.
• Support continuous monitoring activities including vulnerability management configuration compliance patch coordination security scan analysis and verification of remediation efforts.

• Maintain and update security authorization documentation including System Security Plans (SSPs) security control narratives network diagrams inherited controls Configuration Management (CM) Plans Incident Response Plan (IRPs) Contingency Plan (CPs) Risk Assessment Reports Certification and Accreditation (C&A) packages and System Requirements Traceability Matrices (SRTMs).
• Collaborate with System Owner System Administrators Information System Security Engineer (ISSE) and other stakeholders to address security concerns resolve vulnerabilities maintain system compliance and support cybersecurity requirements.
• Perform security compliance and vulnerability assessment using tools such as Nessus Splunk and Security Content Automation Protocol (SCAP) scanning tools to identify vulnerabilities assess system compliance and track remediation efforts.

• Support incident response and reporting participate in investigations coordinate containment actions preserve evidence and contribute to post-incident lessons learned.

Basic Qualifications:

• Bachelors degree is highly lieu of bachelors degree Leidos will consider candidates on a case by case basis and additional experience will be school diploma or equivalent required.
• Minimum of four (4) years of relevant experience in information system security cybersecurity system administration or a related technical field.
• Proficiency in Microsoft Office applications particularly Word Excel and Outlook for documentation reporting and tracking security-related activities.
• Ability to adapt quickly to changing priorities respond effectively to unexpected changes and manage multiple tasks in a fast-past environment.
• Understanding of Risk Management Framework (RMF) National Institute of Standards and Technology (NIST) and Committee on National Security Systems (CNSS) cyber security requirements and guidance cyber security related risk management techniques.
• Certifications & Compliance: DoD 8570 compliance with IAM Level I IAM Level II or IAT Level III (Security SecurityX CISM CISSP or Associate).

Clearance Requirement: Must hold an active TS/SCI with Polygraph

Preferred Qualifications:

• Previous experience in system administration including system configuration maintenance troubleshooting and security support is a plus.
• Experience using the Enterprise Mission Assurance Support Service Support Service (eMass) to support Risk Management Framework (RMF) activities security authorization documentation and compliance tracking.
• Experience with NIST Risk Management Framework (RMF) NIST SP 800-53 security controls and maintaining security authorizations documentation.
• Familiarity with DISA Security Technical Implementation Guides (STIGs) vulnerability management and Plan of Action and Milestones (POA&M) tracking and remediation.

• Current DoD 8140.03 compliance with IAT Level I or higher (e.g. Security CASP CISM or CISSP).
• Vulnerability assessment and analysis experience utilizing SCAP NESSUS and DISA STIGs.

Work Environment:

This position requires on-site work five days per week at the Columbia MD location with established core business hours from 09:00 a.m. to 3:00 p.m. Local travel between company facilities and customer sites is required to support operational and cybersecurity activities as needed.

conmd

If youre looking for comfort keep scrolling. At Leidos we outthink outbuild and outpace the status quo because the mission demands it. Were not hiring followers. Were recruiting the ones who disrupt provoke and refuse to fail. Step 10 is ancient history. Were already at step 30 and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.