Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

VulnU; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Benefits offered by this job

Retirement match

Paid parental leave

Equity

Learning budget

Job summary

Leidos is seeking a hands-on Information Assurance Security Engineer (IASE)/ISSE to support a complex mission-driven environment in Suitland, MD. You will secure, administer, harden, and maintain critical systems while collaborating across network, systems, cybersecurity, and architecture teams to strengthen security posture.

Responsibilities include vulnerability remediation, security testing, architecture support, and ensuring compliance with STIGs/ SRGs across Unix and Windows environments.

Qualifications

• Active TS/SCI clearance required (DISS)
• Experience with DoD RMF, ICD 503, NIST RMF
• Experience with IC/DoD security processes and tools
• Experience in vulnerability assessment, ethical hacking, and penetration testing
• Experience hardening Unix and Windows systems to STIGs
• Software development experience in Java/C/C++ or scripting
• Knowledge of SCAP-based tools and specifications

Responsibilities

• Serve as primary security engineering resource for enterprise infrastructure
• Research and evaluate cybersecurity tools and methodologies
• Participate in architecture reviews and provide security recommendations
• Troubleshoot complex security issues across storage, network, OS
• Conduct vulnerability assessments and penetration testing
• Configure secure admin access and RBAC
• Develop and deliver cybersecurity training

Skills

Security engineering

Vulnerability remediation

RMF/DoD frameworks

Security testing

SSH/TLS/RBAC

Education

Bachelor’s degree (Cybersecurity / EE / IT / IA) with 8+ years

Master’s degree with 6+ years

Tools

Trellix/ESS

ACAS

RedSeal

STIG Manager

Evaluate STIG

SteelCloud ConfigOS

Job description

# Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)Leidos · leidos.comCategory: GRC & ComplianceLocation: Suitland, MDSalary: $107,900 – $195,050Clearance: TS/SCI## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Retirement match* Paid parental leave* Equity* Learning budgetInformation Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)Location: Suitland, MDClearance: Active TS/SCILeidos is hiring a hands-on Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE) to support a complex, mission-driven enterprise environment in Suitland, MD.In this engineering-focused role, you will actively secure, administer, harden, and maintain critical systems and infrastructure while collaborating across network, systems, cybersecurity, and architecture teams to continuously strengthen and evolve the organization’s overall security posture. You will combine deep technical security expertise with hands on engineering, vulnerability remediation, security testing, and architecture support to help protect mission critical systems and capabilities.This role is open to candidates across a range of experience levels. The scope of the position and corresponding compensation will be aligned with the selected candidate’s background and expertise.Primary ResponsibilitiesServe as a primary security engineering resource for enterprise infrastructure, providing hands on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.Research and evaluate cybersecurity tools, technologies, and methodologies to identify opportunities to strengthen enterprise security.Participate in architecture and engineering reviews and provide security recommendations for new capabilities, technologies, and infrastructure changes.Troubleshoot complex security issues across storage, networking, operating systems, authentication, and enterprise infrastructure.Conduct vulnerability assessments, ethical hacking, and penetration testing to identify and address security risks.Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and management interfaces, based on operational and security requirements.Apply and validate applicable DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), vendor security guidance, and industry security best practices.Configure and maintain secure administrative access using technologies and principles such as SSH, HTTPS/TLS, role based access control (RBAC), centralized authentication, and least privilege.Develop and deliver training on cybersecurity tools, technologies, and processes.Required QualificationsBachelor’s degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or a related field with 8 or 12 years of experience; Master’s degree with 6 or 10 years of experience. Additional relevant experience may be considered in lieu of a degree.Active TS/SCI clearance in DISS and required program access.Security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.Extensive experience with Intelligence Community (IC), Department of Defense (DoD), Defense Information Systems Agency (DISA), NAVINTEL Cybersecurity, Fleet Cyber Command (FLTCYBERCOM), and DoDIIS processes, tools, systems, reporting mechanisms, and requirements supporting Assessment and Authorization (A&A).Software development experience using Java, C, C , or other programming or scripting languages, including experience designing and developing host based and network based scanning tools.Experience with Security Content Automation Protocol (SCAP) based tools and specifications.Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.Extensive experience hardening modern Unix operating systems, such as Oracle Solaris 10/11 and RHEL, as well as Microsoft Windows environments using Security Technical Implementation Guides (STIGs).Extensive experience securing systems and software in accordance with IC, DoD, and industry security best practices.Experience developing security controls, testing methodologies, and test procedures for systems, cloud based architectures, and Cross Domain Solutions (CDS).Demonstrated ability to take a proactive, results oriented approach while building effective customer and team relationships.Required CertificationsActive IAM Level III DoD 8140 approved baseline certification, such as CISSP or SecurityX.NITESONIDABAOPP1If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.Original Posting:October 30, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.Pay Range:Pay Range $107,900.00 - $195,050.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.