IASE / ISSE

Leidos LLC; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a hands-on Information Assurance Security Engineer (IASE) / ISSE to support a complex enterprise in Suitland, MD. You will secure, administer, harden, and maintain critical systems while collaborating with network, cybersecurity, and architecture teams.

This role offers opportunities across experience levels; compensation aligns with background and expertise, with a focus on security engineering and testing in a DoD IC context. Active TS/SCI clearance preferred.

Qualifications

• Bachelor's degree in Cybersecurity or related field required or equivalent
• Active TS/SCI clearance required or ability to obtain
• 8+ years security engineering experience with RMF/IC/DoD processes

Responsibilities

• Serve as primary security engineering resource for enterprise infrastructure
• Research and evaluate cybersecurity tools and methodologies
• Participate in architecture & engineering reviews and provide security recommendations
• Troubleshoot security issues across storage, networking, OS, and auth
• Conduct vulnerability assessments, ethical hacking, and pen testing
• Review and harden storage protocols (NFS, SMB/CIFS, iSCSI) as needed
• Apply DISA STIGs/SRGs and vendor guidance
• Configure secure admin access (SSH, TLS, RBAC)
• Develop and deliver cybersecurity training

Skills

Security engineering

Vulnerability remediation

Penetration testing

SCAP tools

DoD RMF

Networking

Java/C/C++

Cloud security

Education

Bachelor's degree in Cybersecurity or related field

Master's degree (optional)

Tools

Trellix/ESS

ACAS

RedSeal

Evaluate STIG

STIG Manager

SteelCloud ConfigOS

Job description

Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

Location: Suitland, MD

Clearance: Active TS/SCI

Leidos is hiring a hands‑on Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE) to support a complex, mission‑driven enterprise environment in Suitland, MD. In this engineering‑focused role, you will actively secure, administer, harden, and maintain critical systems and infrastructure while collaborating across network, systems, cybersecurity, and architecture teams to continuously strengthen and evolve the organization’s overall security posture. You will combine deep technical security expertise with hands on engineering, vulnerability remediation, security testing, and architecture support to help protect mission critical systems and capabilities. This role is open to candidates across a range of experience levels. The scope of the position and corresponding compensation will be aligned with the selected candidate’s background and expertise.

Primary Responsibilities

• Serve as a primary security engineering resource for enterprise infrastructure, providing hands on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.
• Research and evaluate cybersecurity tools, technologies, and methodologies to identify opportunities to strengthen enterprise security.
• Participate in architecture and engineering reviews and provide security recommendations for new capabilities, technologies, and infrastructure changes.
• Troubleshoot complex security issues across storage, networking, operating systems, authentication, and enterprise infrastructure.
• Conduct vulnerability assessments, ethical hacking, and penetration testing to identify and address security risks.
• Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and management interfaces, based on operational and security requirements.
• Apply and validate applicable DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), vendor security guidance, and industry security best practices.
• Configure and maintain secure administrative access using technologies and principles such as SSH, HTTPS/TLS, role based access control (RBAC), centralized authentication, and least privilege.
• Develop and deliver training on cybersecurity tools, technologies, and processes.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or a related field with 8+ or 12+ years of experience; Master’s degree with 6+ or 10+ years of experience. Additional relevant experience may be considered in lieu of a degree.
• Active TS/SCI security clearance.
• 8+ years of security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.
• Extensive experience with Intelligence Community (IC), Department of Defense (DoD), Defense Information Systems Agency (DISA), NAVINTEL Cybersecurity, Fleet Cyber Command (FLTCYBERCOM), and DoDIIS processes, tools, systems, reporting mechanisms, and requirements supporting Assessment and Authorization (A&A).
• 5+ years of software development experience using Java, C, C++, or other programming or scripting languages, including experience designing and developing host based and network based scanning tools.
• Experience with Security Content Automation Protocol (SCAP) based tools and specifications.
• Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.
• Extensive experience hardening modern Unix operating systems, such as Oracle Solaris 10/11 and RHEL, as well as Microsoft Windows environments using Security Technical Implementation Guides (STIGs).
• Extensive experience securing systems and software in accordance with IC, DoD, and industry security best practices.
• Experience developing security controls, testing methodologies, and test procedures for systems, cloud based architectures, and Cross Domain Solutions (CDS).
• 2+ years of project management experience.
• Demonstrated ability to take a proactive, results oriented approach while building effective customer and team relationships.

Required Certifications

• Active IAT or IAM Level II/III DoD 8140 approved baseline certification, such as CISSP ISSEP or SecurityX, or the ability to obtain the required certification within 30 days of hire.

Pay Range

Pay Range $107,900.00 - $195,050.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.