Information Assurance Engineer - DoD RMF & A&A Specialist

Leidos; Chesapeake (VA); On-site; USD 69,550 - 125,725; Full time

Job summary

Leidos is seeking an experienced Information Assurance Engineer to support the PEO IWS 5B program. You will collaborate with the ISSM and security team to ensure compliance with NIST 800-53 controls and maintain the integrity of critical information systems.

Responsibilities include risk assessments, A&A/ATO activities, ongoing monitoring, and maintaining SSPs/POA&Ms/SARs; you will operate SIEM, vulnerability scanners, and coordinate remediation while staying current with threats and industry

Qualifications

• Active DoD Secret Clearance is required.
• 4+ years of experience in cybersecurity or information assurance.
• Associate's degree or equivalent experience in a related field.
• IAT II Certifications to meet DoD 8140 compliance (e.g., Security+).

Responsibilities

• Perform risk assessments and vulnerability analyses to identify and mitigate security risks.
• Support security authorization activities, including A&A and ATO processes.
• Conduct weekly audits and maintain security documentation (SSPs, POA&Ms, SARs).
• Monitor and maintain security controls through continuous monitoring practices.
• Operate security tools such as SIEM, IDS/IPS, and vulnerability scanners.
• Respond to security incidents and coordinate remediation efforts.
• Conduct compliance audits to ensure adherence to security policies.
• Stay informed on emerging cybersecurity threats and best practices.

Skills

Risk assessment

Vulnerability analysis

Security compliance

Security documentation

Collaboration

Research ability

Unix/Linux scripting

Education

Associate's degree in CS/IS/Cybersecurity or related field

Tools

SIEM

IDS/IPS

SCAP

ACAS/Nessus

DISA STIGs

eMASS

RMF

Job description

Leidos is seeking an experienced Information Assurance Engineer to support the PEO IWS 5B program. You will collaborate with the ISSM and security team to ensure compliance with NIST 800-53 controls and maintain the integrity of critical information systems.

Responsibilities include risk assessments, A&A/ATO activities, ongoing monitoring, and maintaining SSPs/POA&Ms/SARs; you will operate SIEM, vulnerability scanners, and coordinate remediation while staying current with threats and industry