Information Systems Security Engineer (ISSE) SME

Quest Oracle Community; Bethesda (MD); Presencial; USD 154.000 - 278.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Paid Time Off

11 paid Holidays

401K with company match

Flexible Schedules

Education and Training Support

Parental Paid Leave

Competitive compensation

Health and Wellness programs

Income Protection

Paid Leave

Descripción de la vacante

Leidos is seeking an Information Systems Security Engineer (ISSE) SME to design, develop, and implement secure information systems supporting mission operations. You’ll work with ISSMs, developers, engineers, and government stakeholders to integrate robust security controls and ensure resilience against threats.

You will install and maintain security tools, perform vulnerability assessments, and contribute to DevSecOps pipelines throughout the system lifecycle.

Formación

• Must have an active TS/SCI with a Polygraph.
• Experience with vulnerability scanning and remediation tracking.
• Experience monitoring systems with SIEM and incident response.
• Experience auditing systems for secure baselines and policy compliance.
• Experience mapping CVEs to internal controls and remediation strategies.
• Familiarity with multiple vulnerability scanning tools (AWS Inspector, Tenable, Rapid7, SonarQube, Fortify, OWASP).

Responsabilidades

• Apply system security engineering principles across design, lifecycle, authentication, cryptography, and change control.
• Conduct or support cybersecurity assessments and audits.
• Coordinate with cybersecurity personnel and recommend mitigation strategies.
• Identify vulnerabilities and non-compliance with standards and regulatory requirements.
• Perform vulnerability scans and drive remediation with DevSecOps teams.
• Install, configure, and maintain security scanning/monitoring tools within DevSecOps pipelines.
• Support RMF authorization by reviewing documentation and guiding risk-based decisions.

Conocimientos

TS/SCI with Polygraph

Vulnerability scanning

SIEM monitoring

Incident response

Security audits

RMF / ATO support

DevSecOps collaboration

Regulatory compliance

Educación

MS degree

Herramientas

AWS Inspector

Tenable Security Center

Rapid7 Nexpose

SonarQube

Fortify

OWASP tools

Descripción del empleo

Leidos has a new and exciting opportunity for an Information Systems Security Engineer (ISSE) SME in our Intel Sector's (IS) Analysis Solutions Business Area (ASBA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security!

Job Description

The Information Systems Security Engineer (ISSE) SME is responsible for designing, developing, and implementing secure information systems that support mission operations. The ISSE collaborates with multidisciplinary teams - including Information Systems Security Managers (ISSMs), software developers, systems engineers, and government stakeholders-to integrate effective security controls and ensure systems remain resilient against evolving threats and vulnerabilities. The ISSE also installs and maintains security scanning tools, performs vulnerability assessments, and reviews scan results to identify and remediate security risks. Additionally, the role ensures security tools and controls are properly integrated into the DevSecOps CI/CD pipeline, supporting continuous security testing and monitoring throughout the system lifecycle.

Primary Responsibilities

• Applying system security engineering principles in areas such as system security design, lifecycle engineering, authentication and authorization mechanisms, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control.
• Conducting or supporting technical cybersecurity assessments and security audits.
• Coordinating with cybersecurity personnel and recommending mitigation strategies to reduce risk.
• Identifying system vulnerabilities and instances of non-compliance with cybersecurity standards and regulatory requirements.
• Performing vulnerability scans using approved customer tools and generating reports detailing findings and remediation progress. Collaborating with DevSecOps teams to review vulnerability scan results and support remediation of identified security findings.
• Install, configure, and maintain security scanning and monitoring tools, ensuring they are properly integrated within system environments and DevSecOps pipelines.
• Support the Risk Management Framework (RMF) authorization process by reviewing security documentation and providing risk-based recommendations to stakeholders regarding system risk posture as part of Authority to Operate (ATO) activities while managing and tracking Plans of Action and Milestones (POA&Ms) for customer-sponsored systems, coordinating with key stakeholders including ISSOs, ISSEs, ISSMs, and Security Control Assessors (SCAs).

Basic Qualifications

• MS degree and 15 or more years of prior relevant experience. Additional years of experience may be substituted in lieu of a degree.
• Must have an active TS/SCI with a Polygraph, to be considered.
• Experience conducting routine vulnerability scanning, providing formal and informal reports to technical teams, and tracking remediation activities. Experience reviewing security bulletins, threat intelligence, and vulnerability advisories to stay informed of current threats and emerging attack techniques.
• Experience monitoring system and network security using Security Information and Event Management (SIEM) tools. Investigate and respond to cyber security incidents (system and/or network breaches, malware attacks).
• Experience tracking Common Vulnerabilities and Exposures (CVEs) and mapping them to internal controls and remediation strategies.
• Experience auditing systems to ensure compliance with secure configuration baselines and cybersecurity policies
• Experience using at least two vulnerability scanning tools, such as AWS Inspector, Tenable Security Center, Rapid7 Nexpose, SonarQube, Fortify, or OWASP security tools.
• At least 1 Certification: CISSP, Splunk, Network+, Security+, OSCP, CEH, CASP+, ISSEP

Preferred Qualifications

• Experience with Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools.
• Experience using Splunk, including creating dashboards and security monitoring visualizations.
• Familiarity with cloud computing platforms, such as AWS, Oracle Cloud, or Google Cloud Platform (GCP).

Pay Range

Pay Range $154,050.00 - $278,475.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

• Paid Time Off
• 11 paid Holidays
• 401K with a 6% company match and immediate vesting
• Flexible Schedules
• Discounted Stock Purchase Plans
• Technical Upskilling
• Education and Training Support
• Parental Paid Leave
• Competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave
• Retirement

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.