Systems Security Analyst

Leidos is seeking an Systems Security Analyst to support an Air Force Cybersecurity Service Provider (CSSP) mission. In this onsite role in San Antonio, TX
, you will evaluate and improve system security controls, security posture, documentation, and compliance, while collaborating with Government and technical stakeholders to drive actionable security recommendations.

• Assess the effectiveness of system security controls and apply security policies aligned to system security objectives.
• Evaluate configuration management, change management, and release-management processes for security impact and compliance.
• Support security requirements implementation and identify and mitigate security deficiencies through testing and ongoing assessment.
• Analyze and report organizational cybersecurity-posture trends and system cybersecurity-posture trends.
• Verify minimum security requirements are implemented for applications and systems.

• Assess access controls using least privilege and need-to-know principles.
• Evaluate cybersecurity-enabled products and compensating security controls to determine whether identified risk is reduced to an acceptable level.
• Implement security measures to resolve vulnerabilities, mitigate risk, and recommend required security changes to systems or components.
• Apply system security measures in accordance with established procedures to support confidentiality, integrity, availability, authentication, and non-repudiation requirements.
• Mitigate or correct deficiencies found during security or certification testing, and recommend risk acceptance when appropriate for consideration by an authorized Government representative.

• Develop procedures and support testing for system failover and transfer of operations to alternate sites based on system availability requirements.
• Plan and recommend system modifications or security adjustments based on exercise results or changes to the operating environment.
• Ensure system security operations and maintenance activities are properly documented, updated as required, and maintained alongside implementation documentation.
• Verify and update cybersecurity documentation so it accurately reflects application and system security-design features.

• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
• Conduct research and analysis to support cybersecurity performance improvement and mission objectives.
• Work independently and collaboratively with project, technical, cybersecurity, and Government stakeholders.
• Perform other duties as assigned.

• Bachelor’s degree in Cybersecurity or a related field.
• 3+ years of relevant cybersecurity experience.
• Current Top Secret/SCI security clearance, with ability to obtain additional or higher read-ins as required.
• Must meet DoD 8140 /
  Defense Cyber Workforce Framework (DCWF) Work Role 511 –
  Cyber Defense Analyst qualification requirements /
  IAT Level II certification.

• Encryption technologies and algorithms, including IPsec
  , AES
  , GRE
  , IKE
  , MD5
  , SHA
  , and 3
  
  DES
  .
• Cybersecurity principles and organizational requirements for confidentiality, integrity, availability, authentication, and non-repudiation
  .
• IT security principles and methods such as firewalls
  , demilitarized zones
  , and encryption.
• Network access and identity and access-management concepts, including Public Key Infrastructure (PKI).
• Operating systems knowledge; network traffic and communications concepts including TCP/IP
  , the OSI model
  , and ITIL concepts.
• Understanding of system component installation, integration, and optimization, plus various computer architectures.
• Network design processes covering security and operational objectives and associated tradeoffs.
• Network-analysis tools used to identify vulnerabilities.
• Ability to design integration of hardware and software solutions and assess how changes in conditions or environment affect system-security outcomes.
• Skills in evaluating security designs and security-system access controls, including assessing security controls against cybersecurity principles and requirements.

• Internet Protocol Security (IPsec)
• Advanced Encryption Standard (AES)
• Generic Routing Encapsulation (GRE)
• Internet Key Exchange (IKE)
• Message Digest Algorithm (MD5)
• Secure Hash Algorithm (SHA)
• Triple Data Encryption Standard (3
  
  DES)
• Firewalls, demilitarized zones
• Public Key…