Information Assurance Engineer

Description

Leidos is seeking an Information Assurance Engineer to support an IC customer Program focused on the Integration, Operations, and Sustainment of various systems both legacy and in development. The Cyber Security Engineer will need to be a self‑starter with excellent analytical and problem‑solving skills, flexibility, good judgment, and the ability to coordinate multiple concurrent tasks in an effective manner. The Cyber Security Engineer works with internal team members to ensure the systems are functional, secure, and scalable.

The Engineer will collaborate with internal leadership, customers, and counterparts as the single POC for all items related to security. The systems and networks documentation and services developed will be used to collect and process data and improve the program’s security infrastructure. The Cyber Security Engineer will design and develop cyber security technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise‑wide cyber systems and networks.

The Cyber Security Engineer shall have security Assessment and Authorization (A&A) expertise, to include but not limited to: ICD 503, Federal Information Security Management Act (FISMA), XACTA, and National Institute of Standards and Technology (NIST).

• Lead multi‑disciplined teams in the design and implementation of the cyber security system architecture.
• Produce cyber security architectural artifacts and provide architectural analysis of cyber security features and existing systems related to future needs and trends.
• Review and provide input to system requirements based on cyber security posture.
• Apply industry best practices and lessons learned into future iterations and new designs.
• Support the Engineering Review Board by evaluating artifacts for architectural compliance.
• Provide broad based experience in the systems engineering lifecycle and apply the experience to specific cyber security initiatives relating to architectural design and development.
• Resolve architecture implementation issues during integration and testing.
• Advise and assist team members to deploy and configure collection services and tools.
• Work with team members to move data to the appropriate data stores.
• Meet hands‑on RMF responsibilities.
• Lead Vulnerability Management and Continuous Monitoring tasks for multi‑disciplined teams.
• Perform other tasks as assigned.

• Requires a BS degree and 8–12 years of prior relevant experience OR a Master’s degree with 6–10 years of prior relevant experience, or 4 years of additional experience in lieu of a degree.
• Must possess and maintain a TS/SCI Security with Poly Clearance.
• DoD.
  8570/8140 IAM III Certification (CISSP, CISM, CISA, etc.).
• Minimum required – COMPTIA Security+ or comparable IAT/IAM II/III certification.
• Proactive self‑starter demonstrating a positive, willing attitude and excellent oral and written communication skills.
• Demonstrated ability to adapt to new technologies and learn quickly.
• Organizational skills: plan and prioritize work, follow tasks to logical conclusion, and meet high standards with attention to detail.
• Communications: clearly and efficiently communicate with team members and clients, verbally and in writing, and present ideas appropriately for the audience and context.
• Security Assessment and Authorization (A&A) expertise.
• Familiar with Amazon Web Services (S3 Buckets, EC2, Reserved Instances, etc.).
• Familiar with systems engineering documentation creation (VDDs, diagrams, etc.).
• Familiar with team collaboration tools (Jira, Confluence).
• Working knowledge of XACTA 360, Tenable Security Center, Nessus, Trellix ePO, ACAS, HBSS, and audit enterprise security services.
• Proficient in ACAS Vulnerability and STIG scanning, reporting, management and remediation.
• Recognized as an industry expert in the Risk Management Framework (RMF) steps one through six with ability to lead Assessment and Authorization (A&A) tasks to successfully achieve Authority to Operate (ATO).

• Familiar with CI/CD Pipeline Management.
• Experience with Dev Ops tools (Git Lab,…