Systems Security Analyst

Leidos is seeking an experienced Systems Security Analyst to support an Air Force Cybersecurity Service Provider (CSSP) mission.

The Systems Security Analyst will assess system security controls and cybersecurity posture identify and mitigate security deficiencies support implementation of security requirements and provide cybersecurity recommendations to Government and technical stakeholders.

The successful candidate will apply cybersecurity information assurance and risk-management principles to evaluate system security support remediation maintain security documentation and ensure appropriate security controls are implemented and operating effectively.

• Assess the effectiveness of system security controls.
• Apply security policies to meet system security objectives.
• Assess configuration management change management and release-management processes for security impact and compliance.
• Develop procedures and support testing of system failover and transfer of operations to alternate sites based on system availability requirements.
• Analyze and report organizational cybersecurity-posture trends.
• Analyze and report system cybersecurity-posture trends.
• Ensure system security operations and maintenance activities are properly documented and updated as required.
• Evaluate cybersecurity-enabled products and compensating security controls to determine whether identified risk has been reduced to an acceptable level.
• Assess access controls based on principles of least privilege and need-to-know.
• Implement security measures to resolve vulnerabilities mitigate risk and recommend security changes to systems or system components as required.
• Implement system security measures in accordance with established procedures to support confidentiality integrity availability authentication and non-repudiation requirements.
• Mitigate or correct security deficiencies identified during security or certification testing and recommend risk acceptance when appropriate for consideration by the authorized Government representative.
• Verify minimum security requirements are implemented for applications and systems.
• Plan and recommend system modifications or security adjustments based on exercise results or changes to the operating environment.
• Maintain documentation of system security implementation operations and maintenance activities.
• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
• Verify and update cybersecurity documentation to accurately reflect application and system security-design features.
• Conduct research and analysis to support cybersecurity performance improvement and mission objectives.
• Work independently and collaboratively with project technical cybersecurity and Government stakeholders.
• Perform other duties as assigned.

• Bachelors degree in Cybersecurity or a related field.
• 3 years of relevant cybersecurity experience.
• Current Top Secret/SCI security clearance with ability to obtain additional or higher read-ins as required.
• Must meet DoD 8140 / Defense Cyber Workforce Framework (DCWF) Work Role 511 Cyber Defense Analyst qualification requirements / IAT Level II certification.
• Knowledge of encryption technologies and algorithms including:
  • Internet Protocol Security (IPsec)
  • Advanced Encryption Standard (AES)
  • Generic Routing Encapsulation (GRE)
  • Internet Key Exchange (IKE)
  • Message Digest Algorithm (MD5)
  • Secure Hash Algorithm (SHA)
  • Triple Data Encryption Standard (3DES)
• Knowledge of cybersecurity principles and organizational requirements related to confidentiality integrity availability authentication and non-repudiation.
• Knowledge of IT security principles and methods including firewalls demilitarized zones and encryption.
• Knowledge of network access identity and access-management concepts including Public Key Infrastructure (PKI).
• Knowledge of operating systems.
• Knowledge of network traffic and communications including TCP/IP the OSI model and Information Technology Infrastructure Library (ITIL) concepts.
• Knowledge of how system components are installed integrated and optimized.
• Knowledge of various computer architectures.
• Knowledge of network-design processes including security objectives operational objectives and associated tradeoffs.
• Knowledge of network-analysis tools used to identify vulnerabilities.
• Skill in designing integration of hardware and software solutions.
• Ability to determine how a security system should operate including resilience and dependability requirements and assess how changes in conditions operations or the environment may affect system-security outcomes.
• Skill in developing and applying security-system access controls.
• Skill in evaluating the adequacy of security designs.
• Skill in assessing security-system designs.
• Skill in assessing security controls based on cybersecurity principles and requirements.

• CSSP Infrastructure Support certification.
• Experience performing ISSO or ISSM functions.
• Experience with Cyber Network Defense and Analysis.
• Experience with IT security engineering.
• Experience with cloud-security engineering.
• Agile training or experience.

ENAMOR

If youre looking for comfort keep scrolling. At Leidos we outthink outbuild and outpace the status quo because the mission demands it. Were not hiring followers. Were recruiting the ones who disrupt provoke and refuse to fail. Step 10 is ancient history. Were already at step 30 and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.