Information System Security Engineer

VulnU; San Diego, Northern (CA, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Leidos is seeking an Information System Security Engineer to support classified information systems onsite at the San Diego campus. You will act as ISSE for Special Access Program systems, ensuring security controls throughout the lifecycle from development to decommissioning.

The role requires active DoD Top Secret clearance, RMF/JSIG expertise, and strong experience with Windows/Linux environments, STIGs, and Nessus/Splunk tooling. Onsite work at Campus Point, San Diego, CA is expected.

Qualifications

• Bachelor's Degree with 8-12 years of experience, or Master’s with 6-10 years, or equivalent experience.
• Active DoD Top Secret clearance required; eligible for SAP/SCI access after hire.
• DoD 8140/8570 IAT level II or higher certification (e.g., Security+).
• Professional experience administering Windows and Linux in enterprise environments.
• Expertise with RMF and JSIG; familiarity with STIGs and security assessments.
• Strong documentation and communication skills for stakeholders.

Responsibilities

• Serve as ISSE for SAP information systems across full system lifecycle.
• Design, develop, and maintain secure classified information systems and architectures.
• Implement and validate STIGs, SRGs, and vendor guidance across platforms.
• Collaborate with ISSMs, ISSOs, and admins to resolve compliance issues.
• Prepare for government security assessments and audit evidence collection.
• Mentor system administrators and program personnel on cybersecurity practices.

Skills

RMF

JSIG

STIGs

Top Secret

Windows

Linux

Active Directory

IAT II

Education

Bachelor's Degree

Master’s Degree

Tools

Nessus

Splunk

Group Policy

Job description

Leidos' Corporate Information Security Office, reporting through the Digital Sector, is seeking an Information System Security Engineer to support various information systems and act as the Subject Matter Expect to Junior System Administrators. The successful candidate will be responsible for maintaining, securing, and supporting complex classified information systems, as well as ensuring compliance with security protocols and regulations.Location: This position is full time, onsite at our Campus Point, San Diego office.Clearance: You must currently hold an active DoD Top Secret clearance to be considered and must be eligible to obtain Special Access Program and Special Compartmented Access (SCI) post hire. Primary ResponsibilitiesThis role includes a combination of duties to protect information, and maintain security controls, for an entire system, site, or program to reduce risk.Serve as the Information System Security Engineer (ISSE) for Special Access Program information systems, providing security engineering support throughout the full system lifecycle from research and development through deployment, accreditation, operations, maintenance, and decommissioning.Design, develop, integrate, and maintain secure classified information systems and architectures in accordance with the Joint Special Access Program Implementation Guide (JSIG), Risk Management Framework (RMF), applicable DoW policies, and program-specific security requirements.Develop and maintain system security architecture, including network segmentation, boundary protections, authentication, privileged access, encryption, auditing, logging, secure communications, virtualization, storage, and data protection solutions.Implement and validate DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), vendor security guidance, and program specific hardening requirements across Windows, Linux, network, virtualization, storage, and supporting infrastructure.Coordinate with ISSMs, ISSOs, System Administrators, and Program Management to resolve technical and compliance issues.Develop secure configuration baselines, build procedures, automation, scripts, and configuration management processes to improve repeatability and compliance across classified systems.Support troubleshooting and resolution of complex security and infrastructure issues involving a variety of information systems.Support the preparation for and execution of government security assessments, authorization reviews, inspections, and audits, including collection and presentation of objective evidence demonstrating control implementation.Provide technical cybersecurity guidance and mentoring to system administrators, ISSOs, and other program personnel. Basic QualificationsMust be a U.S. Citizen.Bachelor's Degree with 8-12 years of experience, Master’s degree with 6-10 years of experience, or equivalent relevant experience and/or industry-standard certifications may be considered in lieu of degree.Must hold a current Active Top Secret security clearance to be considered along with sustained ability to be cleared to Special Access Programs and ability to obtain Top Secret/SCI security clearance.Must have a DoD 8140/8570 IAT level II or higher certification such as CompTIA Security .Professional-level knowledge and hands-on experience administering, engineering, or securing Windows and Linux operating systems, including enterprise server and workstation environments.Expert-level knowledge of virtualization technologies, enterprise storage platforms, and backup/recovery solutions, including the security considerations associated with each.Working knowledge of enterprise networking concepts and technologies, including TCP/IP, routing, switching, VLANs, firewalls, network segmentation, DNS, authentication, and secure network architecture.3 years of demonstrated experience supporting Special Access Program (SAP) environments and applying applicable cybersecurity requirements, including the RMF and JSIG.Experience interpreting cybersecurity requirements and translating security controls into technical configurations, engineering requirements, and system implementations.Experience implementing, assessing, and maintaining technical security controls across operating systems, networks, virtualization platforms, storage, and supporting infrastructure.Hands-on experience implementing and maintaining DISA STIGs, SRGs, Nessus, and secure configuration baselines.Knowledge of enterprise security technologies and concepts, including Active Directory, Group Policy, endpoint security, centralized logging, auditing, privileged access, encryption, and access control.Experience supporting the system development and security lifecycle, including design, integration, testing, deployment, authorization, continuous monitoring, maintenance, and decommissioning.Ability to troubleshoot complex technical and cybersecurity issues spanning operating systems, networking, or other information system components.Strong technical documentation and communication skills with the ability to clearly communicate security risks, technical requirements, remediation strategies, and engineering recommendations to both technical and nontechnical stakeholders.Experience with the Risk Management Framework (RMF) and maintaining compliance artifacts such as SCAP scans, STIGs, and Nessus Vulnerability reports.Experience developing or maintaining technical procedures, system build documentation, configuration baselines, work instructions, scripts, or automation used to support secure and repeatable system deployments.Experience designing or securing air-gapped environments including offline patching, software repositories, vulnerability management, and configuration management. Preferred QualificationsISC(2) Certification Information System Security Professional (CISSP) or Information System Security Engineering Professional (CISSP-ISSEP) certification.RedHat Certified System Administrator (RHCSA) certification.Demonstrated ability to independently interpret JSIG/RMF controls and translate them into practical technical architectures, configurations, implementation guidance, and validation procedures.Experience developing and maintaining SIEM/log-management platforms such as Splunk, and endpoint security technologies to include DLP.