Information Assurance Security Engineer

Leidos hiring for Information Assurance Security Engineer jobs in Herndon, VA, US

Description

Leidos has an opportunity for an Information Assurance/Security Engineer) to support the EAMS Program. The ideal candidate will be joining a small team and will share the knowledge, workload and the future for a mission critical application.

Must be able to work on-site in Herndon, VA. Remote/hybrid work is NOT available for this position. Work hours are flexible.

Primary Responsibilities

•       Support the ISSO with Log Review/Analysis using SIEM tools (Splunk, etc.) to determine appropriate actions

•       Conduct Vulnerability Analysis and Review of ACAS scans

•       Assist with analysis and completion of DISA STIGs to ensure STIG-compliant solutions

•       Utilize DevOps, SecOps methodologies to analyze and ensure that development requirements effectively integrate security requirements throughout the entire process

•       Ensure ConMon requirements are addressed at the system level

•       Employ best practices when implementing controls including software engineering methodologies; system and security engineering principles; secure -enhancing design, secure-enhancing architecture, and secure -enhancing coding techniques

•       Coordinate security activities with system leads, ISSO’s and program managers

Determine, design, implement, and evaluate the security requirements and measures of computer systems and networks

•       Assess potential risks, mitigation measures, residual risks, and providing recommendations to stakeholders

•       Develop and implement technical solutions to address security vulnerabilities

•       Conduct risk assessments and provide recommendations for mitigating risks

•       Lead the technical aspects of internal security audits and investigations

•       Ensure compliance with government regulations and industry standards

Basic Qualifications

• Bachelor's degree and 8+ years of experience OR additional 4 years of experience required in lieu of a degree (will consider at Staff level with the appropriate years of experience).

• Experience that includes supporting Assessment and Authorization (A&A) and information assurance processes and documentation using RMF,

• Experience working with software developers and architects to understand security requirements

• Experience guiding application developers on security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements

• DISA STIGs and STIG Viewer experience

• Hands-on experience in developing and validating control implementations and test procedures

• Knowledge of current security risks and protocols

• DoD Approved 8570 IA Technical (IAT)/IA Management (IAM) Level 2 Certification (e.g., Security+)

• RMF, Xacta experience

Clearance Requirement: TS/SCI with Poly required for Position or TS/SCI and willingness to obtain a polygraph.

Preferred Qualifications

• Experience working with AWS/Google cloud-hosted information systems or applications

• Experience working with Redhat or CentOS Linux operating systems

• Experience working in a DevSecOps environment and tool chain

• Creating and using security tools and processes for scanning, testing, monitoring, and reporting

• Experience in planning and overseeing configuration changes for major applications across multiple networks

• Good analytic and problem-solving skills

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.