Information Security Systems Engineer

Leidos; Frederick (MD); On-site; USD 104,000 - 190,000; Full time

Job summary

Join a forward-thinking company as an Information Security Systems Engineer, where you will play a crucial role in enhancing cybersecurity for critical national systems. This position involves conducting thorough risk assessments, designing innovative security solutions, and collaborating with stakeholders to ensure robust protection against emerging threats. You will leverage your expertise in risk management and network security to deliver actionable insights and recommendations. This is an exciting opportunity to contribute to the security of vital communication systems that support national leadership and continuity of government. If you are passionate about cybersecurity and eager to make a difference, this role is for you.

Qualifications

• 7+ years of experience in Information Systems Security Engineering.
• CISSP or CASP certification required.
• Expertise in analyzing network architectures for security.

Responsibilities

• Conduct cybersecurity risk assessments and provide mitigation recommendations.
• Support design and operation of real-time threat detection capabilities.
• Engage stakeholders to define security objectives and requirements.

Skills

Risk Management Framework (RMF)

Cybersecurity Risk Assessments

Network Security Engineering

Strong Writing Skills

Independent Work

Education

Bachelor of Science in Computer Science

Bachelor in Information Assurance

Bachelor in Information Security System Engineering

Tools

NIST Special Publications 800 Series

Firewalls

Intrusion Detection Systems (IDS)

Intrusion Prevention Systems (IPS)

Job description

Description

Program Summary

As an Information Security Systems Engineer (ISSE) you will join a small team of security engineers providing Information Assurance (IA) Architecture Analysis and Security Engineering Support for the implementation and fielding of the National Leadership Command Capability (NLCC) in support of Nuclear Command, Control, and Communications (NC3), Continuity of Government (COG), and Senior Leader communications. The ISSE will perform in a consultant like role providing technical knowledge, expertise and advice to our customer.

Primary Responsibilities:

The ISSE shall deliver and lead threat-informed cybersecurity products – cybersecurity risk assessments, architecture reviews, and engineering guidance that bring sound, accurate, timely, and actionable service to mission partners. This includes:

• Conduct cybersecurity risk assessments and provide prioritized risk mitigation recommendations in support of the customer’s mission.
• Support the design, implementation, and operation of real-time capabilities to discover, detect, analyze, and mitigate threats and vulnerabilities.
• Analyze candidate architectures by evaluating against defined security requirements to identify security gaps, and provide recommended mitigation strategy.
• Research and evaluate candidate emerging technologies to determine cybersecurity effectiveness.
• Aid stakeholders through the development, refinement, delivery, and implementation of innovative solutions and capabilities.
• Engage stakeholders to ensure security objectives, protection needs, security requirements and associated validation methods are defined.
• Validate and verify system security requirements definitions and analysis and establish system security design.
• Design, develop, implement and/or integrate IA and security systems and system components including those for networking, computing and enclave environment to include those with multiple enclaves and with differing data protection/classification requirements.
• Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.
• Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
• Facilitate and attend technical exchange meetings or working groups to address stakeholder IA issues and concerns.

CLEARANCE REQUIRED: Active TS/SCI with polygraph. US Citizenship required. CCA cases may be considered.

Qualifications

• Bachelor of Science degree from an accredited university ideally in Computer Science, Information Assurance, Information Security System Engineering or related field with a minimum of 7 years of experience as an Information Systems Security Engineer (ISSE) or Systems Engineer on programs and/or contracts with the customer space.
• CISSP OR CASP certification required.
• Expertise in the Risk Management Framework (RMF) and conducting cybersecurity risk assessments.
• Expertise in analyzing existing and proposed network architectures to identify protection needs and provide recommended mitigation strategies based on DoD, IC, and Federal security policies and enterprise solutions.
• Experience with network technology and systems security engineering. Experience in identifying, researching, characterizing, and documenting security weaknesses related to operating systems, software applications, firmware, network hardware components, as well as network architecture design and documented policies and procedures.
• Experience developing and documenting system security requirements and conducting requirements gap analysis.
• Experience with security monitoring and incident response capabilities.
• Knowledge of emerging technologies such as Zero Trust, Cloud Computing, etc.
• Experience implementing security and/or network components, i.e. routers, firewalls, IPS, IDS, etc.
• Knowledge of and practical experience with the NIST Special Publications 800 Series, CNSSI 1253, and DoD 8500.
• Strong writing skills.
• Confidence and ability to present briefing to senior level DoD officials in both prepared briefings and/or in ad hoc discussions.
• Ability to work independently within a schedule and with little direction.

Original Posting Date:

2025-01-15

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $104,650.00 - $189,175.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.