Cybersecurity Analyst

Leidos; United States; Remote; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking a detail-oriented Cybersecurity Analyst with RMF expertise to support assessment, authorization, and continuous monitoring of information systems. You will lead security accreditation efforts, develop authorization packages, and perform control assessments in accordance with RMF and NIST standards.

The role emphasizes collaboration with system owners and engineers, risk assessment activities, and ongoing security reporting to ensure compliance with government requirements.

Qualifications

• Bachelor’s degree or equivalent experience in a IT or cybersecurity field.
• 3–7 years of cybersecurity experience and/or information assurance experience.
• Knowledge of RMF and NIST SP 800-37/53/171 is required.
• Experience with vulnerability assessment tools and security controls documentation.

Responsibilities

• Lead and support the security accreditation process for information systems.
• Develop, maintain, and review security authorization packages.
• Conduct security control assessments in RMF alignment.
• Collaborate with system owners and engineers to implement controls.
• Monitor compliance and manage POA&Ms and remediation activities.

Skills

RMF knowledge

NIST SP 800-37/53/171

Vulnerability assessment

Security controls documentation

Strong communication

Secret clearance eligibility

CISSP/CISM/Sec+

Education

Bachelor’s degree in Cybersecurity/IT/CS

Equivalent experience

Tools

Tenable/Nessus/ACAS

RMF toolset

Job description

Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization’s Risk Management Framework (RMF) processes.

Primary Responsibilities

• Lead and support the security accreditation process for information systems.
• Develop, maintain, and review security authorization packages.
• Conduct security control assessments in accordance with RMF and applicable security standards.
• Collaborate with system owners, engineers, and stakeholders to implement security controls.
• Perform security risk assessments and recommend mitigation strategies.
• Monitor systems for compliance with cybersecurity policies and standards.
• Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities.
• Support continuous monitoring activities, including vulnerability management and security reporting.
• Prepare documentation for Assessment & Authorization (A&A) activities.
• Participate in internal and external cybersecurity audits.
• Stay current on cybersecurity threats, regulatory requirements, and best practices.

Basic Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 3–7 years of experience in cybersecurity, information assurance, or security compliance.
• Experience implementing or supporting the NIST Risk Management Framework (RMF).
• Knowledge of:
  • NIST SP 800-37
  • NIST SP 800-53
  • NIST SP 800-171
  • FISMA
  • FedRAMP (preferred)
• Experience with vulnerability assessment tools such as Tenable, Nessus, or ACAS.
• Strong understanding of security controls, risk assessment, and compliance documentation.
• Excellent written and verbal communication skills.
• Excellent communication skills both written and oral.
• At least one of the following Information Security Certifications:
  • CISSP
  • CISM
  • Security+
  • CAP (Certified Authorization Professional)
  • CGRC (Certified in Governance, Risk and Compliance)
  • CEH
• Ability to obtain a Secret level Security Clearance.

Preferred Qualifications

• Active Secret clearance
• Familiarity with cloud security (AWS, Azure, or Google Cloud).
• Experience supporting continuous monitoring programs
• Risk Management Framework (RMF) knowledge/experience
• Security Accreditation & Authorization (A&A) knowledge/experience
• NIST Cybersecurity Framework knowledge/experience
• Vulnerability Management knowledge/experience
• Security Compliance knowledge/experience
• Risk Assessment knowledge/experience
• Incident Response fundamentals knowledge/experience
• Security Documentation knowledge/experience
• Microsoft Windows & Linux administration knowledge/experience

Remote Interview / Identification Notice

**** Please be advised that during the interview, you will be required to keep your camera on, and your interviewer will be taking your picture for identification purposes if an offer letter is extended to you.

If you’re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already at step 30 — and moving faster than anyone else dares.

Original Posting

September 24, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $69,550.00 - $125,725.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.