Information Systems Security Manager

Description

The Homeland Sector at Leidos is seeking an Information Systems Security Manager (ISSM) to support a fast-paced program within the Security Engineering Program. This role involves supporting the delivery of comprehensive IT and support services to ensure mission success while adhering to DoD standards and regulations. The ISSM will oversee the cybersecurity posture of DoD information systems, ensuring compliance with DoD security standards and protecting sensitive data.

The ISSM will develop and implement security policies, conduct risk assessments, manage system accreditations (RMF), and lead continuous monitoring efforts. The role requires collaboration with cross-functional teams to enforce security controls and manage incident response. The ISSM will also maintain security documentation and ensure ongoing compliance with applicable regulations.

Primary Responsibilities:

The ISSM will lead the delivery of threat-informed cybersecurity products, including risk assessments, architecture reviews, and engineering guidance, to provide mission partners with accurate, timely, and actionable support.

Key responsibilities include:

• Conducting cybersecurity risk assessments and providing prioritized mitigation recommendations to support mission objectives.

• Designing, implementing, and operating real-time capabilities to detect, analyze, and mitigate threats and vulnerabilities.

• Evaluating candidate architectures against defined security requirements, identifying gaps, and recommending mitigation strategies.

• Researching and assessing emerging technologies for cybersecurity effectiveness.

• Developing and implementing innovative solutions to address stakeholder needs and enhance security capabilities.

• Collaborating with stakeholders to define security objectives, requirements, and validation methods.

• Validating and verifying system security requirements and establishing secure system designs.

• Developing, implementing, and integrating security systems and components across networking, computing, and multi-enclave environments with varying data protection requirements.

• Identifying and implementing information security functionality to ensure consistent application of agency security policies and enterprise solutions.

• Supporting security planning, risk analysis, certification, and awareness activities for system and network operations.

• Reviewing Certification and Accreditation (C&A) documentation for completeness and compliance, providing actionable feedback.

Qualifications

• Education and Experience:

  • Must possess a minimum of TS Clearance with the ability to obtain and maintain program SCI

  • Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related field from an accredited university.

  • Minimum of 8 years of experience as an Information Systems Security Engineer/Manager on programs or contracts working within the customer space.

• Technical Expertise:

  • Proficiency in the Risk Management Framework (RMF) and conducting cybersecurity risk assessments.

  • Expertise in network technology and systems security engineering, including identifying and documenting security weaknesses in operating systems, software, firmware, network hardware, and architecture design.

  • Experience developing and documenting system security requirements and conducting gap analyses.

  • Practical experience with security monitoring and incident response capabilities.

• Knowledge of Standards:

  • Familiarity with NIST Special Publications 800 Series, CNSSI 1253, and DoD 8500.

• Communication and Leadership:

  • Ability to confidently present briefings to senior-level DoD officials, both in prepared and ad hoc discussions.

  • Strong ability to work independently, manage schedules, and deliver results with minimal direction.

Preferred Qualifications

• DoD 8570/8140 Compliance:

  • Certification at IAT Level II or higher.

  • Certification at IAM Level II or higher.

• Technical Knowledge:

  • Familiarity with emerging technologies such as Zero Trust and Cloud Computing.

  • Proficiency with security tools for vulnerability scanning, penetration testing, and security auditing.

• Operational
  
  Experience:
  
  

  • Experience supporting Cyber Plan and Policy at the national…