Senior Information Systems Security Engineer

🔥 1 hour ago

🇺🇸 United States – Remote

💵 $107.9k - $195.1k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Perform cybersecurity authorization services for SMIT, the Navy's largest IT services program • Serve as primary ISSE for ATO packages under the Navy Risk Management Framework • Develop and review ATO submissions and coordinate updates and corrections to A&A artifacts • Evaluate software and hardware against minimum security requirements based on NIST SP 800-53 Rev. 5 • Author, review, coordinate, and submit authorization artifacts to eMASS for IATT and ATO milestones • Conduct cybersecurity authorization activities under DoD, DON, and RMF guidance • Continuously monitor system resources through automated scanning and reporting feeds • Verify patch compliance using ACAS, IAVA dashboards, and Microsoft Defender for Endpoints • Coordinate with administrators to troubleshoot and escalate patching issues • Implement security procedures and coordinate STIG checklist execution, review, and disposition • Develop and maintain SOP, TTP, POA&M, and FISMA Score Card documentation • Brief customers on cybersecurity status and support ATO conditions with government Cyber teams • Support site visits, audits, and System Readiness Reviews • Ensure secure operation of network systems, architecture, and topology • Develop secure business processes and participate in network, security, and operations technology planning • Apply defense-in-depth principles and practices • Document Ports, Protocols and Services, dataflows, CAL boundaries, and AO registrations • Develop solutions to complex cybersecurity authorization challenges • Serve as technical point of contact for subcontractors and vendors • Influence technical leadership on ISSE solution design and process decisions

🎯 Requirements

• Bachelor's degree and 8-12 years of prior relevant experience or Master's with 6-10 years of prior relevant experience in Cybersecurity, Information Security, IT, EE, Network Engineering, Computer Science, or related field • Must be a US Citizen and possess an active DoD Secret Clearance • Hold an active security certification that meets DOD 8570 IAT level III or higher • Complete understanding of the RMF steps, especially Steps 4 through 7 • Ability to identify all applicable STIGs from a system authorization boundary and its components • Ability to decompose security controls/security checks and verify artifacts and test results satisfy controls/AP/checks • Understanding of MITRE ATT&CK exploitation techniques and tactics to determine risk and mitigations • Ability to understand technical mitigations and identify proper mitigating factors • Experience with eMASS, including control inheritance, TR Import, and POAM import functionality • Experience verifying patch compliance using ACAS, IAVA compliance dashboards, and Microsoft Defender for Endpoints • Experience with STIG checklists, system security documentation, SOPs, TTPs, POA&Ms, and FISMA Score Cards • Hands-on experience with cybersecurity tools and DoD networks • Experience in FISMA and other information assurance compliance reporting • Experience in cybersecurity assessment, vulnerability scanning, integration and testing, data analytics, or security operations • Experience leading cybersecurity tasks and collaborating with customers, stakeholders, and team members • Knowledge of DoD cybersecurity assessment and authorization processes, NIST guidance, RMF documentation, and applicable DoD instructions • Experience supporting formal Cybersecurity/IA testing and preparing System Security Plans • Verbal and written communication abilities, including business writing on complex topics • Understanding of security monitoring, reporting, and maintaining compliance with security regulations and policies • Knowledge of Security Engineering and Architecture, Assessment and Authorization, Vulnerability Assessment, Incident Management, Vulnerability Management, Security Operations, and Policy and Program Development • Ability to lead and work in a matrix organization • Nice to have: Top Secret Clearance, cloud authorizations, NMCI authorizations, ITIL processes or ITIL Foundation V4 certification, shift work willingness