Information System Security Officer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $87.1k - $157.4k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Implement and enforce DoD, NIST, CNSS, and organizational cybersecurity policies, procedures, and standards • Develop, review, and maintain system security documentation, including SSPs, POA&Ms, Security Assessment Reports, and Continuous Monitoring Plans, within eMASS • Conduct vulnerability assessments and assist with remediation of STIG, ACAS, and Nessus findings • Assist in preparing and submitting systems for Authorization to Operate under the Risk Management Framework • Identify and direct remediation of technical problems during testing and implementation of new systems • Provide input to Risk Management Framework activities and related lifecycle, operational, and training documentation • Perform risk analysis for major application or system changes • Analyze design constraints, trade-offs, and detailed system and security designs while considering lifecycle support • Monitor and evaluate system compliance with IT security, resilience, and dependability requirements • Stay current on emerging threats, vulnerabilities, and compliance requirements • Collaborate with Program Managers, domain engineers, Government counterparts, and Government and Industry partners

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field; additional years of experience will be considered in lieu of degree • Must be a U.S. Citizen • Must possess an active and current Secret clearance • 5+ years of experience in cybersecurity, with at least 2–3 years specifically as an ISSO or similar security role • Working knowledge of the DoD RMF process and NIST SP 800-53 controls • Knowledge of Security Technical Implementation Guides (STIGs) • Experience with vulnerability management tools including ACAS, Nessus, HBSS, and Splunk • Experience supporting and developing required artifacts for ATO/authorization processes within the DoD environment • 2+ years of documented experience designing cybersecurity solutions for specific operational needs and environmental factors • DoD 8570/8140 IAT Level II or IAM Level I baseline certification, such as Security+ CE, CAP, CISM, or CISSP • Knowledge of SaaS, IaaS, and PaaS cloud computing service models • Experience with government cloud security environments including GovCloud, Azure Government, C2E, and SC2E • 2+ years of documented experience with IT supply chain security and risk management policies, requirements, and procedures