Information Systems Security Manager (ISSM)

Leidos Inc; Huntsville (AL); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos in Huntsville, Alabama seeks an Information Security Systems Manager (ISSM) to oversee cybersecurity for a DoD software product in the CEMA program. The role emphasizes RMF accreditation, ATO processes, and collaboration with cross-functional teams to implement security controls and maintain documentation.

The ISSM will lead risk assessments, manage continuous monitoring, and ensure compliance with DoD standards while coordinating with government customers.

Qualifications

• US Citizen with active Secret clearance and ability to obtain TS/SCI.
• 8+ years of related experience or 6+ years with a master's degree.
• Current cybersecurity certification (CISSP, CISM, or similar).
• Deep knowledge of DoD cybersecurity policies, RMF, FISMA and NIST 800-53.
• Experience building/maintaining an ATO for software offerings.
• Experience with risk, vulnerability assessments and cyber auditing.

Responsibilities

• Act as SME on cybersecurity compliance for the CEMA program.
• Facilitate Authorization to Operate (ATO) processes with stakeholders.
• Coordinate continuous monitoring with ISSOs and Cyber Security Engineers.
• Oversee security scans of software development for the product offering.
• Maintain security documentation and RMF accreditation.
• Lead risk assessments, vulnerability assessments and remediation planning.
• Act as primary contact for IT security topics with government customers.
• Stay current on threats and adapt the security posture accordingly.

Skills

Active Secret clearance

Cross-functional collaboration

Strong communication

Security policy knowledge

Cloud and network security

ATO coordination

RMF & DoD compliance

Vulnerability assessments

Education

Bachelor's Degree

Master's Degree

Tools

RMF

NIST 800-53

Vulnerability scanning tools

Security auditing tools

Configuration management tools

Job description

Description

Leidos has a new and exciting opportunity for a Information Security Systems Manager (ISSM) in our INTEL Sector's Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security!

Information System Security Manager (ISSM)

Will support the CEMA team whose primary customer is PAE-Fires. The ISSM will oversee the cybersecurity posture of a primarily software based tactical based intrusion detection tool custom built for DoD information systems, ensuring compliance with DoD security standards and protecting sensitive data. The ISSM will develop and implement security policies, oversee and facilitate risk assessments, manage system accreditations (RMF), and lead continuous monitoring efforts as appropriate. This role requires collaboration with cross-functional teams and program stakeholders to enforce security controls and manage continuous monitoring. The ISSM will also maintain security documentation and ensure ongoing compliance with applicable regulations.

This position will require 100% on-site work located in Huntsville, AL with no remote work supported

Primary Responsibilities

• Act as the Subject Matter Expert (SME) on cybersecurity compliance / information assurance for the CEMA program.
• Facilitate approval process for Authorization to Operate (ATO), or any Interconnection Security Agreements (ISA), working with the customer and stakeholders to submit artifacts and receive AO endorsement.
• Collaborate with assigned ISSOs and Cyber Security Engineers within other programs and at the PAE-Fires CIO office to execute the continuous monitoring process with full system observability.
• Oversee software development-based security scans of the code for the product offering / development environment
• Assist with the cybersecurity posture of associated networks at events as assigned by customer tasking
• Develop, implement, and maintain security policies, procedures, and documentation to ensure compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA).
• Guide and direct other program teams to produce necessary artifacts for compliance with DoD security standards and regulations of the same
• Perform risk assessments, vulnerability assessments, and security audits upon request to identify system vulnerabilities and provide remediation strategies.
• Ensure the accreditation process for DoD systems (e.g., RMF accreditation) is completed and maintained in compliance with all applicable requirements.
• Act as the primary point of contact for IT security-related topics, coordinating incident response and reporting to senior management and government customers.
• Maintain and track security documentation, including system security plans (SSPs), risk assessments, and Plan of Actions & Milestones (POA&Ms).
• Stay current with emerging cybersecurity threats, vulnerabilities, and trends to ensure the program adapts to evolving security challenges.

Basic Qualifications

• US Citizen with an active Secret clearance and the ability to obtain a TS/SCI
• Bachelor's Degree with 8+ years of experience or Master's degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• Up to date current cybersecurity certification (CISSP, CISM, or similar)
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience building/maintaining an ATO (especially for software product offerings)
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of cloud security, network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.

Preferred Qualifications

• Experience in managing security for DoD programs or software product offerings
• Experience with security tools for software development vulnerability scanning, penetration testing, and security auditing.
• Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
• Experience with configuration management and change management processes in a secure environment.

Pay Range

Pay Range $107,900.00 - $195,050.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.