Information Systems Security Engineer (ISSE)

Via Logic LLC; Mountain View (CA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an experienced Information Systems Security Engineer (ISSE) to secure NAS HPC environments and support the development, documentation, and maintenance of comprehensive System Security Plans (SSPs) across NAS systems, clusters, interconnects, and data resources.

The role requires expert consultation on HPC security issues, including MPI-based workloads, GPU nodes, InfiniBand networks, and parallel filesystems.

Qualifications

• Bachelor's degree and 8+ years of relevant experience.
• Experience managing project work.
• In-depth knowledge of cybersecurity principles.
• Ability to delegate and track multiple projects.
• Ability to develop, motivate, and manage the workforce.
• Strong work ethic and teamwork capabilities.

Responsibilities

• Ensure SSPs and artifacts comply with NASA and U.S. government requirements.
• Provide expert HPC security consultation on hardening MPI workloads, GPU nodes, and high-speed interconnects.
• Balance usability with robust security for large-scale simulations and research.
• Produce HPC-specific data analytics and compliance reporting for leadership.
• Coordinate POA&M activities across HPC systems and teams.
• Conduct compliance assessments for large HPC environments and report findings to NAS leadership.
• Coordinate security policy compliance for NPR 2810.1F, NIST SPs, FISMA, and related directives.
• Participate in NASA A&A activities for large HPC systems and documentation updates.
• Perform vulnerability scans on HPC assets and report results to ISSOs.

Skills

Project management

Cybersecurity principles

Team leadership

Delegation

Work ethic

Education

Bachelor's degree

Job description

The AEGIS program at Leidos is seeking an experienced Information Systems Security Engineer (ISSE) to support the security and protection of NASA Advanced Supercomputing (NAS) systems and High Performance Computing (HPC) environments. The ISSE will support the development, documentation, implementation, enhancement, operation, and maintenance of comprehensive System Security Plans (SSPs) across NAS systems, clusters, interconnects, storage platforms, and data resources. This role will help ensure security documentation, configuration baselines, security checklists, and system hardening guidelines align with applicable security requirements while addressing the unique performance, throughput, and operational demands of HPC environments.

PRIMARY RESPONSIBILITIES:

• Ensure that the SSP and related artifacts comply with NASA and U.S. Government security requirements, including NPR 2810.1F, NIST 800-53/53B, FISMA, and the NIST HPC Security Overlay guidance.
• Provide expert technical consultation for internal and external stakeholders on HPC-specific security issues, including system hardening for MPI-based workloads, GPU/accelerator nodes, high-speed fabrics (InfiniBand, Slingshot), and performance-critical parallel filesystems.
• Identify solutions that balance high-performance computing usability with robust security ensuring that protective measures do not inhibit large-scale simulation workflows, mission operations, or research productivity.
• Provide regular HPC-specific data analytics and reporting - including vulnerability summaries, risk evaluations, security telemetry, and compliance findings - to Division and Branch leadership.
• Support Plan of Action and Milestones (POA&M) development, tracking, updating, and remediation for all HPC systems. Coordinate POA&M resolution activities across HPC systems engineering, networking, storage, and operations teams.
• Conduct targeted compliance assessments for large-scale HPC environments and report findings to NAS leadership. Assessments may include HPCc-cspecific topics such as high-speed interconnect configurations, MPI-node exposure risks, GPU driver-level vulnerabilities, and specialized HPC authentication/authorization workflows.
• Coordinate with other subtasks to implement, enforce, and maintain compliance with Government cybersecurity policies, including - but not limited to - NPR 2810.1F, NIST 800-53/800-53B, NIST SP 800-234 (HPC Security Overlay), DHS directives, FIPS standards, OMB guidance, and FISMA requirements.
• Coordinate participation in NASA Assessment & Authorization (A&A) activities for large-scale HPC systems, including data calls, technical evaluations, security control inheritance definitions, and documentation updates.
• Conduct credentialed and performance-aware vulnerability scans across HPC assets, ensuring scanning methods accommodate specialized hardware (GPU nodes, high-speed fabrics, parallel filesystems) without degrading mission workloads. Report results to NAS leadership and Information System Security Officials (ISSOs).
• Report potential or actual HPC security incidents to the appropriate NAS or Agency personnel. Support investigations in partnership with NASA SOC, Incident Response Teams, and NAS Management.
• Support Root Cause Analysis (RCA) investigations and remediation actions related to HPC security issues - especially those involving system performance anomalies, distributed job failures, and parallel-environment attack surfaces.
• Assist in the development of policies, procedures, and guidelines ensuring that HPC computational, storage, networking, and data-analysis systems comply with all applicable NASA and government security requirements.
• Maintain expertise in HPC security by monitoring NASA, NIST, DOE, and industry HPC security advisories. Communicate emerging HPC-specific threats - such as accelerator-specific vulnerabilities, MPI/RDMA protocol risks, and job-scheduler exploitation vectors - to facility staff.
• Coordinate security compliance activities related to Section 508, Supply Chain Risk Management (SCRM), IPv6 adoption, and cybersecurity reviews for all HPC IT acquisitions, including compute clusters, interconnects, accelerators, and data-storage hardware.
• Supports vulnerability assessment and design of intrusion detection tools for complex network architecture.

BASIC QUALIFICATIONS:

• Bachelor's degree and 8 years of prior relevant experience.
• Experience managing project work.
• Possess in-depth technical knowledge of Cybersecurity principles.
• Ability to delegate and track multiple projects at the same time.
• Ability to develop, motivate, and effectively manage the workforce.
• Strong work ethic and willingness to work as a team.

CLEARANCE REQUIREMENTS:

• U.S. Citizenship is required.
• Must have the ability to obtain and maintain a security clearance ranging from a Public Trust, at minimum, up to a Top Secret clearance, as required.

Pay Range:

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.