Sr. ISSE TS​/SCI Polygraph

Leidos offers a unique opportunity for a Sr. Information System Security Engineer in the Intel Sector’s Cyber & Analytics Business Area (CABA). The position requires an active TS/SCI Polygraph up front; no exceptions.

Benefits include paid time off, 11 paid holidays, a 401K with a 6% company match, flexible schedules, discounted stock purchase plans, technical upskilling, education and training support, parental paid leave, and more.

Pay Range: $ – $.

• Validating and verifying system security requirements and establishing system security designs for large‑scale systems, major system elements, and interfacing systems that are part of a large complex network environment with geographically distributed components.
• Identifying and implementing appropriate information security architectures and functionality to ensure uniform application of security policy and enterprise solutions.
• Recommending and developing technical solutions, products, and standards based on current and desired system security architecture.
• Assessing and mitigating system security threats and risks throughout the program life cycle.
• Leading and/or contributing to the security planning, assessment, risk analysis, risk management, certification and awareness activities for various system and networking operations.
• Effectively collaborating with other internal technical experts on a day‑to‑day basis.
• Communicating with Program Managers and points of contact from customer organizations when necessary, regarding security issues of significant importance.
• Participating in Program Increment Planning and related agile team activities.
• Working closely with System Engineering, Test Engineering, and Integration teams to ensure that the hardware and software architecture and implementation meet security requirements.
• Analyzing and assessing system implementation against multiple security compliance policies and recommending and implementing enhancements.
• Evaluating security solutions to ensure they meet customer specified requirements for processing information.
• Evaluating the impact of new development on the operational security posture of the system.
• Evaluating, reviewing, and testing critical software.
• Proposing, assessing, coordinating, implementing, and enforcing information system security policies, standards, and methodologies.
• Auditing and assessing system security configuration settings using common methodologies and tools.
• Managing and enforcing security strategies and policies that effect various components of geographically distributed systems.
• Providing configuration management for security‑relevant information system software.
• Serving as a subject matter expert in security architecture to include providing advice to Program Managers, customer technical experts, and internal program teams.
• Formulating security compliance requirements for new system features.
• Identifying and remediating security issues throughout the system.
• Supporting risk assessment, risk management, security control assessment, continuous monitoring, service design, and other IA program support functions.
• Working with development teams to enrich team‑wide understanding of different types of vulnerabilities, attack vectors and remediation approaches.
• Planning and conducting security verification testing of relevant Type 1 devices.

• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline and at least 12 years of relevant experience. Additional experience may be substituted for a degree.
• Must have a solid understanding of security practices and policies and hands‑on vulnerability testing experience using customer tools.
• Must have experience applying Risk Management Framework.
• Must have experience formulating and assessing IT security policy.
• Must have demonstrated knowledge of and experience with common security tools, such as Nessus, NMAP and Wireshark, hardware/software security implementation, communication protocol, encryption techniques/tools, and web services.
• Must have experience with secure configurations of commonly used desktop and server operating systems.
• Must be…