Information Systems Security Engineer; ISSE SME

Leidos has an exciting opportunity for an Information Systems Security Engineer (ISSE) SME in our Intel Security Sector's Analysis Solutions Business Area. We are at the forefront of Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management.

Competitive benefits include Paid Time Off, 11 paid holidays, 401(k) with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and more.

The Information Systems Security Engineer (ISSE) SME is responsible for designing, developing, and implementing secure information systems that support mission operations. The ISSE collaborates with multidisciplinary teams—including Information Systems Security Managers (ISSMs), software developers, systems engineers, and government stakeholders—to integrate effective security controls and ensure systems remain resilient against evolving threats and vulnerabilities. The ISSE also installs and maintains security scanning tools, performs vulnerability assessments, and reviews scan results to identify and remediate security risks.

Additionally, the role ensures security tools and controls are properly integrated into the Dev Sec Ops  CI/CD pipeline, supporting continuous security testing and monitoring throughout the system lifecycle.

• Applying system security engineering principles in areas such as system security design, lifecycle engineering, authentication and authorization mechanisms, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control.
• Conducting or supporting technical cybersecurity assessments and security audits.
• Coordinating with cybersecurity personnel and recommending mitigation strategies to reduce risk.
• Identifying system vulnerabilities and instances of non‑compliance with cybersecurity standards and regulatory requirements.
• Performing vulnerability scans using approved customer tools and generating reports detailing findings and remediation progress; collaborating with Dev Sec Ops  teams to review vulnerability scan results and support remediation of identified security findings.
• Installing, configuring, and maintaining security scanning and monitoring tools, ensuring they are properly integrated within system environments and Dev Sec Ops  pipelines.
• Supporting the Risk Management Framework (RMF) authorization process by reviewing security documentation and providing risk‑based recommendations to stakeholders regarding system risk posture as part of Authority to Operate (ATO) activities while managing and tracking Plans of Action and Milestones (POA&Ms) for customer‑sponsored systems, coordinating with key stakeholders including ISSOs, ISSEs, ISSMs, and Security Control Assessors (SCAs).

• Experience conducting routine vulnerability scanning, providing formal and informal reports to technical teams, and tracking remediation activities. Experience reviewing security bulletins, threat intelligence, and vulnerability advisories to stay informed of current threats and emerging attack techniques.
• Experience monitoring system and network security using Security Information and Event Management (SIEM) tools; investigate and respond to cyber security incidents (system and/or network breaches, malware attacks).
• Experience tracking Common Vulnerabilities and Exposures (CVEs) and mapping them to internal controls and remediation strategies.
• Experience auditing systems to ensure compliance with secure configuration baselines and cybersecurity policies.
• Experience using at least two vulnerability scanning tools, such as AWS Inspector, Tenable Security Center, Rapid7 Nexpose, Sonar Qube, or OWASP security tools.
• At least one certification: CISSP, Splunk, Network+, Security+, OSCP, CEH, CASP+, ISSEP.
• Requires an MS degree and 15 or more years of prior relevant experience; additional years of experience may be substituted in lieu of a degree.
• To be considered must have an active…