CSSP Analyst

Leidos; Alexandria (VA); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Cyber Security Service Provider (CSSP) Analyst / Site Assistance Visits (SAV) Analyst for the JSP Cyber Security Task Order in Alexandria, VA. The role requires an active Secret clearance (TS/SCI eligible) and will be performed onsite with partial remote work possible at discretion.

Primary duties include conducting audits and inspections, performing SAVs, tracking POA&Ms, and ensuring compliance with CSSP/CCRI and PKI standards across diverse IT environments.

Qualifications

• Bachelor's degree in Science or Engineering with 8+ years of relevant experience.
• DoD 8570 IAT Level II certification required.
• Active Secret clearance (TS/SCI eligible) required prior to start.

Responsibilities

• Conduct cybersecurity audits, inspections, vulnerability assessments, and ensure CSSP/CCRI compliance.
• Execute Site Assistance Visits (SAVs) to verify regulatory compliance with CCORI, PKI, NATO, and BSA.
• Manage POA&Ms, track findings, and verify remediation with inspecting organizations.
• Identify systems not fully assessed and coordinate targeted manual assessments to ensure proper evaluation.
• Maintain and report Remediation status for all inspections.
• Perform CCRI evaluation across network, DNS, HBSS, cross-domain, VOIP, VOSIP, VTC, REL networks, and operating systems.

Skills

DoD 8570 IAT Level II certification

Active Secret clearance

Education

Bachelor's degree in Science or Engineering

Job description

The Digital Sector at Leidos has an exciting opportunity as a Cyber Security Service Provider (CSSP) Analyst / Site Assistance Visits (SAV) Analyst on our GSM-O II IDIQ contract’s Joint Service Provider (JSP) Cyber Security Task Order in Alexandria, VA. JSP provides a full range of IT products, services, and solutions and customer services to the Office of the Secretary of Defense (OSD), Chairman of the Joint Chiefs of Staff (CJCS) and the Joint Staff (JS), Director of Administration (DA), Pentagon Force Protection Agency (PFPA), Washington Headquarters Services (WHS), and other OSD offices for them to meet mission and business requirements. Through the JSP Cyber Security program, JSP performs a wide variety of services and functions required to secure the information security posture for DoD services. This role will be based onsite in the Alexandria, VA area and an active Secret (TS/SCI eligible) security clearance is required prior to start. Partial remote work may be allowed at Program and Customer Leadership's discretion.

Primary Responsibilities:

• Conduct cybersecurity related audits, inspections, vulnerability assessments, compliance assessments, Security Readiness Review (SRR), and ensure compliance with Cyber Security Service Provider (CSSP) and Command Cyber Readiness Inspection (CCRI) evaluation criteria.
• Execute Site Assistance Visits (SAVs) to ensure regulatory compliance with Command Cyber Operational Readiness Inspection (CCORI), Public Key Infrastructure (PKI), North Atlantic Treaty Organization (NATO), and Balanced Survivability Assessment (BSA).
• Manage projects, track and report completion/closure of inspection findings documented in Plan of Actions and Milestones (POA&M) and other action item in the Inspection Findings Reports.
• Identify systems and assets that are not sufficiently assessed through automated scanning or routine, periodic assessments and recommend and/or conduct customized, manual assessments of systems as required to ensure proper evaluation for compliance.
• Track and maintain Post Inspection Finding Remediation and POA&M Status Report for all inspections.
• Validate remediation of the findings or submit the artifacts/or POA&M's to inspecting organization for approval.
• Perform technical, operational, and non-technical CCRI evaluation areas including, internal and external network infrastructure, Domain Name System (DNS), internal network vulnerability scan, wireless and mobile security, enclave security, Host Based Security System (HBSS), configuration reviews, traditional/physical security, releasable (REL) networks, database security, cross domain solutions, Voice over Internet Protocol (VoIP), Voice over Secure Internet Protocol (VoSIP), Video Teleconference (VTC), exchange services, different operating systems (specifically UNIX, Windows, Linux), web servers, REL networks and compliance directives.

Basic Qualifications:

• Bachelor's degree in Science or Engineering Discipline and 8+ years of experience is required. Additional experience may be considered in lieu of degree.
• DoD 8570 IAT Level II certification.
• Active Secret (TS/SCI eligible) security clearance is required prior to start.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting: November 4, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range: Pay Range $107,900.00 - $195,050.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.