Job Description

Salary: $101,400 - 183,300 per year Requirements:

• I am seeking candidates who possess a BS degree and 4+ years of relevant experience. You should hold an active TS/SCI clearance with the ability to obtain a Poly and at least one DoD 8570.01-M IAT Level II or higher certification (e.g., CCNA Security, CySA+, Security+ CE, SSCP, CISSP [or Associate]). Additionally, I am looking for individuals with at least 1 year of experience in developing and reviewing security concept of operations, systems security plans, security risk assessments, contingency plans, and configuration management plans. Experience in configuring, running, and analyzing vulnerability scans, as well as familiarity with tools such as XACTA, EMass, or similar, is essential. Your knowledge of NIST Special Publications (e.g., NIST SP 800-27, 30, 37, 53, 60) and CNSS publication CNSSI 1253 will be valuable. I also require experience with incident response plans, plans of actions and milestones, risk management plans, and vulnerability management plans. Strong analytical, communication, problem-solving, and interpersonal skills are crucial, as is the capability to establish a System Security Engineering (SSE) management process to integrate security and privacy controls into complex hardware and software systems.

Responsibilities:

• In this role, you will collaborate closely with ISSOs, ISSSMs, software engineers, software developers, system engineers, and government counterparts to perform the full spectrum of system and cybersecurity engineering tasks to ensure compliance with various regulatory frameworks. Your key tasks will include performing reviews and analyses of cybersecurity event logs; conducting and reviewing technical cybersecurity assessments; coordinating with security personnel and recommending mitigation strategies; identifying points of vulnerability and non-compliance with established cybersecurity standards and regulations; collaborating with our DevOpsSec team to help analyze scan results and remediate findings; managing and maintaining a library of security audit tools for system security testing, internal audits, incident response, and diagnosis of security-related system issues; performing and maintaining vulnerability scans using the Assured Compliance Assessment Solution (ACAS) and creating reports; tracking and reporting Information Assurance Vulnerability Management (IAVM) compliance with ACAS; maintaining Authorization to Operate (ATO) records within the XACTA system; managing and reporting Plan of Actions and Milestones (POA&M) compliance; reviewing certification and accreditation (C&A) documentation to provide feedback on completeness and compliance; and performing system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of operational IA and CND systems.

Technologies:

• Big Data
• Confluence
• Hardware
• JIRA
• Java
• Linux
• Python
• React
• Security
• Web
• Cloud
• Cryptography

More:

I invite you to go above and beyond with additional skills such as software development/coding experience in programming languages like Python, Java, and React; experience with DevOpsSec pipelines and tools; familiarity with database systems, search engines, and web applications; experience in a Linux Red Hat and Centos environment; knowledge of big data applications; and proficiency with tools like Jira and Confluence in an Agile environment. Experience with NIST SP 800-171 will be a bonus.

Join me at Leidos to accelerate your career path as part of an all-star team focused on innovation, collaboration, and professional development. Most work will be on-site at our client location in Bethesda, MD, but a flexible schedule allows for some remote work based on client requirements and deliverables.

Job Tags

Full time, Remote job, Flexible hours,

Similar Jobs