Information Systems Security Officer

Leidos; Columbia (MD); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

401K with company match

Paid time off

Flexible schedules

Job summary

Leidos in Columbia, MD seeks an Information System Security Officer to lead security operations, RMF implementation, and continuous monitoring. You will maintain security authorizations, collaborate with ISSEs and system owners, and manage vulnerability remediation using Nessus, Splunk, and SCAP tools.

The role requires a TS/SCI with Polygraph clearance, DoD 8570 IAM/IAT certifications, and strong communication and organizational skills. On-site work five days a week.

Qualifications

• Bachelor’s degree is highly desired; alternative with substantial relevant experience considered.
• Minimum four years of information security, cybersecurity, or related technical experience.
• Proficiency with MS Office for documentation and reporting.

Responsibilities

• Assist ISSM with information assurance efforts across environments.
• Support continuous monitoring, vulnerability management, and remediation tracking.
• Maintain security documentation: SSPs, RMF artifacts, and A&A packages.
• Collaborate with System Owners and ISSE to address security concerns and compliance.
• Conduct security assessments using Nessus, Splunk, and SCAP tools.

Skills

RMF

NIST standards

CNSS guidance

DoD 8570 IAT/IAM

Cybersecurity experience

Education

Bachelor’s degree desired

HS diploma acceptable with experience

Tools

Nessus

Splunk

SCAP tooling

Job description

Leidos currently has an opening for an Information System Security Officer to work in our Columbia, MD office supporting our Intelligence Sector's Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management.

At Leidos, we offer competitive benefits Leidos Pay and Benefits, including 4 or more weeks Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security!

This position requires an individual who can work independently and collaboratively in a team-oriented environment. The ISSO will support daily security operations, monitor system compliance, maintain security controls, and ensure information systems meet established security policies and regulatory requirements. We are seeking a motivated, detail-oriented Information System Security Officer (ISSO) to join our cybersecurity team. The ideal candidate will have prior experience in information systems security, system administration, or a related technical field, along with strong communication, analytical, organizational, and problem-solving skills.

Primary Responsibilities:

• Assist the Information System Security Manager (ISSM) with information assurance efforts, and systems across numerous environments.
• Support continuous monitoring activities, including vulnerability management, configuration compliance, patch coordination, security scan analysis, and verification of remediation efforts.
• Maintain and update security authorization documentation, including System Security Plans, (SSPs), security control narratives, network diagrams, inherited controls, Configuration Management (CM) Plans, Incident Response Plan (IRPs), Contingency Plan (CPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Collaborate with System Owner, System Administrators, Information System Security Engineer (ISSE), and other stakeholders to address security concerns, resolve vulnerabilities, maintain system compliance, and support cybersecurity requirements.
• Perform security compliance and vulnerability assessment using tools such as Nessus, Splunk, and Security Content Automation Protocol (SCAP) scanning tools to identify vulnerabilities, assess system compliance, and track remediation efforts.
• Support incident response and reporting participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learned.

Basic Qualifications:

• Bachelor’s degree is highly desired. In lieu of bachelor’s degree Leidos will consider candidates on a case by case basis and additional experience will be required. High school diploma or equivalent required.
• Minimum of four (4) years of relevant experience in information system security, cybersecurity, system administration, or a related technical field.
• Proficiency in Microsoft Office applications, particularly Word, Excel, and Outlook, for documentation, reporting, and tracking security-related activities.
• Ability to adapt quickly to changing priorities, respond effectively to unexpected changes, and manage multiple tasks in a fast-past environment.
• Understanding of Risk Management Framework (RMF), National Institute of Standards and Technology (NIST) and Committee on National Security Systems (CNSS) cyber security requirements and guidance, cyber security related risk management techniques.
• Certifications & Compliance: DoD 8570 compliance with IAM Level I, IAM Level II, or IAT Level III (Security+, SecurityX, CISM, CISSP, or Associate).

Clearance Requirement: Must hold an active TS/SCI with Polygraph

Preferred Qualifications:

• Previous experience in system administration, including system configuration, maintenance, troubleshooting, and security support, is a plus.
• Experience using the Enterprise Mission Assurance Support Service Support Service (eMass) to support Risk Management Framework (RMF) activities, security authorization documentation, and compliance tracking.
• Experience with NIST Risk Management Framework (RMF), NIST SP 800-53 security controls, and maintaining security authorizations documentation.
• Familiarity with DISA Security Technical Implementation Guides (STIGs), vulnerability management, and Plan of Action and Milestones (POA&M) tracking and remediation.
• Current DoD 8140.03 compliance with IAT Level I or higher (e.g., Security+, CASP, CISM or CISSP).
• Vulnerability assessment and analysis experience utilizing SCAP, NESSUS and DISA STIGs.

Work Environment:

This position requires on-site work five days per week at the Columbia, MD location, with established core business hours from 09:00 a.m. to 3:00 p.m. Local travel between company facilities and customer sites is required to support operational and cybersecurity activities as needed.

conmd

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

October 9, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.