Senior ISSE​/Penetration Tester TS​/SCI Polygraph

Senior ISSE/Penetration Tester

Leidos offers a Senior ISSE/Penetration Tester role in the Intel Sector’s Cyber & Analytics Business Area (CABA). The position focuses on enhancing system security through penetration testing, vulnerability assessment, and security design for large, complex systems.

A Senior ISSE/Penetration Tester will support new capabilities for complex systems, collaborate with security engineers and technical experts, and lead security testing events.

The selected candidate will have a range of day‑to‑day responsibilities across multiple activities, including the following:

• Validating and verifying system security requirements and establishing system security designs for large‑scale systems.
• Identifying and implementing appropriate information security architectures and functionality to ensure uniform application of security policy and enterprise solutions.
• Recommending and developing technical solutions, products, and standards based on current and desired system security architecture.
• Assessing and mitigating system security threats and risks throughout the program life cycle.
• Leading and/or contributing to security planning, assessment, risk analysis, risk management, certification, and awareness activities for various system and networking operations.
• Collaborating with multiple internal technical experts and communicating with Program Managers and customer POCs regarding significant security issues.
• Working closely with System Engineering, Test Engineering, and Integration teams to ensure that hardware and software architectures and implementations meet security requirements.
• Analyzing and assessing system implementation against multiple security compliance policies and recommending enhancements.
• Evaluating security solutions to ensure they meet customer specified requirements for processing information.
• Evaluating the impact of new development on the operational security posture of the system.
• Evaluating, reviewing, and testing critical software.
• Proposing, assessing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
• Auditing and assessing system security configuration settings using common methodologies and tools.
• Managing and enforcing security strategies and policies that affect various components of geographically distributed systems.
• Participating in Program Increment Planning and related agile team activities.
• Providing configuration management for security‑relevant information system software.
• Serving as a subject matter expert in security architecture to advise Program Managers, customer technical experts, and internal program teams.
• Formulating security compliance requirements for new system features.
• Identifying and remediating security issues throughout the system.
• Supporting risk assessment, risk management, security control assessment, continuous monitoring, service design, and other IA program support functions.
• Working with development teams to enhance team‑wide understanding of vulnerabilities, attack vectors, and remediation approaches.
• Planning and conducting security verification testing of relevant type 1 devices.
• Performing internal and external pen tests against systems to determine vulnerabilities and develop mitigation strategies.
• Performing web application pen tests.
• Performing vulnerability risk assessments.
• Performing physical pen tests and security engineering analysis and assessing the vulnerabilities/solutions for the pen testing.

• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline, and at least 12 years of relevant experience (or equivalent experience).
• Extensive, demonstrated knowledge of and experience with common security tools such as Nessus, NMAP, Wireshark, and other hardware/software security implementation tools.
• In‑depth understanding and experience with security practices and policies and hands‑on vulnerability testing using Tenable Nessus scanning products and/or nmap.
• Experience with Defense in Depth Principles/technology, including access control, authorization,…