Information System Security Engineer

Leidos' Corporate Information Security Office, reporting through the Digital Sector, is seeking an Information System Security Engineer to support various information systems and act as the Subject Matter Expect to Junior System Administrators. The successful candidate will be responsible for maintaining, securing, and supporting complex classified information systems, as well as ensuring compliance with security protocols and regulations.

This position is full time, onsite at our Campus Point, San Diego office.

You must currently hold an active DoD Top Secret clearance to be considered and must be eligible to obtain Special Access Program and Special Compartmented Access (SCI) post hire.

This role includes a combination of duties to protect information, and maintain security controls, for an entire system, site, or program to reduce risk.

• Serve as the Information System Security Engineer (ISSE) for Special Access Program information systems, providing security engineering support throughout the full system lifecycle from research and development through deployment, accreditation, operations, maintenance, and decommissioning.
• Design, develop, integrate, and maintain secure classified information systems and architectures in accordance with the Joint Special Access Program Implementation Guide (JSIG), Risk Management Framework (RMF), applicable DoW policies, and program-specific security requirements.
• Develop and maintain system security architecture, including network segmentation, boundary protections, authentication, privileged access, encryption, auditing, logging, secure communications, virtualization, storage, and data protection solutions.
• Implement and validate DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), vendor security guidance, and program specific hardening requirements across Windows, Linux, network, virtualization, storage, and supporting infrastructure.
• Coordinate with ISSMs, ISSOs, System Administrators, and Program Management to resolve technical and compliance issues.
• Develop secure configuration baselines, build procedures, automation, scripts, and configuration management processes to improve repeatability and compliance across classified systems.
• Support troubleshooting and resolution of complex security and infrastructure issues involving a variety of information systems.
• Support the preparation for and execution of government security assessments, authorization reviews, inspections, and audits, including collection and presentation of objective evidence demonstrating control implementation.
• Provide technical cybersecurity guidance and mentoring to system administrators, ISSOs, and other program personnel.

• Must be a U.S. Citizen.
• Bachelor's Degree with 8-12 years of experience, Master's degree with 6-10 years of experience, or equivalent relevant experience and/or industry-standard certifications may be considered in lieu of degree.
• Must hold a current Active Top Secret security clearance to be considered along with sustained ability to be cleared to Special Access Programs and ability to obtain Top Secret/SCI security clearance.
• Must have a DoD 8140/8570 IAT level II or higher certification such as CompTIA Security+.
• Professional-level knowledge and hands-on experience administering, engineering, or securing Windows and Linux operating systems, including enterprise server and workstation environments.
• Expert-level knowledge of virtualization technologies, enterprise storage platforms, and backup/recovery solutions, including the security considerations associated with each.
• Working knowledge of enterprise networking concepts and technologies, including TCP/IP, routing, switching, VLANs, firewalls, network segmentation, DNS, authentication, and secure network architecture.
• 3+ years of demonstrated experience supporting Special Access Program (SAP) environments and applying applicable cybersecurity requirements, including the RMF and JSIG.
• Experience interpreting cybersecurity requirements and translating security controls into technical configurations, engineering requirements, and system implementations.
• Experience implementing, assessing, and maintaining technical security controls across operating systems, networks, virtualization platforms, storage, and supporting infrastructure.
• Hands-on experience implementing and maintaining DISA STIGs, SRGs, Nessus, and secure configuration baselines.
• Knowledge of…