InfoSec Engineer Lead (SME)

Join us at Leidos, where your most important work is ahead! You will enjoy great benefits such as paid time off (PTO), flexible schedules, discounted stock purchase plans, career growth, unlimited education and training support, parental paid leave and more! You will have the opportunity to work under the best leadership in the industry at all levels; where supporting their employees and what they do….is what matters.

Leidos is seeking an InfoSec Engineer Lead to support on a new, large, multi-year contract for systems engineering, integration, software and mobile development, testing, configuration management and training to develop, modernize.

In this role you will provide oversite on the design and implementation of IT services that adhere to required security guidelines and configurations. You will assign security taskings to personnel and supervise on-going technical security efforts.  This person shall be readily available to respond to questions, concerns, and comments, as well as be proactive in alerting all stakeholders to potential issues.

Primary Responsibilities

• Coordinates with security leadership to ensure that security objectives are supported in the development, operation, and maintenance services.
• Provides solutions to highly challenging and complex system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands.
• Provides leadership and guidance on integrating security requirements in the development, design and application of solutions implemented by staff members.
• Identify security control requirements
• Plan code scanning to identify vulnerabilities
• Manage and review security logs and taking required actions
• Manage and review security logs and taking required actions
• Applies expertise to systems, as well as to dedicated special purpose systems requiring specialized security features, system security configuration and procedures.
• Provides guidance and direction to other professionals, acts in a consulting and/or advisory capacity; coordinates resolution of highly complex problems and tasks, possesses ability to meet and operate under deadlines.
• Provide subject matter expertise and consulting on security related matters for enterprise information system and network architectures, access problems, and implementation of security policies and procedures.
• Optimize system operation and resource utilization and performs system capacity planning/analysis while maintaining the security posture.
• Assist team in Authorization and Accreditation (A&A) across the design lifecycle for classified systems obtaining and maintaining Interim Authority to Operate (ATO), ATO and Authority to Connect (ATC).
• Provide recommendations regarding remediation and mitigation of identified vulnerabilities by developing plan of action and milestones (POA&Ms).

Basic Qualifications

• Active TS/SCI with Polygraph
• Typically requires BS degree and 16+ years of prior relevant, experience in lieu of degree
• Demonstrated experience with navigating the Assessment and Authorization (A&A) process
• Experience in developing and implementing information security controls, procedures, and documentation for the operations of systems.
• Experience with Ongoing Authorizations and Assessments
• Experience with leading teams
• Assess/calculate risk based on threats, vulnerabilities, and shortfalls uncovered in testing Identify mitigating solutions
• Experience with the NIST Risk Management Framework (RMF)
• Experience with Agile Software Development

Preferred Qualifications

• Security+ Certification