Junior Security Engineer: Vulnerability & RMF/ATO Ops

Leidos; Bethesda (MD); On-site; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking a Junior Security Engineer to support day-to-day security activities across enterprise environments. This 100% on-site role focuses on vulnerability management, RMF/ATO activities, and continuous monitoring, working with senior security personnel and other engineering teams.

You will gain exposure to DISA STIGs, system hardening, and security logging while contributing to the overall security posture and ongoing improvement effort at customer sites.

Qualifications

• Bachelor's degree with at least 2 years of relevant experience.
• Active TS/SCI clearance with Polygraph OR willing to obtain poly.
• DoD 8570.11 IAT Level II certifications required (e.g., Security+ CE, CCNA-Security, GSEC, SSCP).

Responsibilities

• Perform day-to-day security activities under supervision and escalate risks as needed.
• Support vulnerability management from detection to closure with remediation and documentation.
• Execute vulnerability scanning using ACAS/Tenable/Nessus and analyze findings.
• Collaborate with Windows, Linux, network and desktop teams to remediate security issues.
• Implement and validate DISA STIGs and baseline configurations across infrastructure systems.
• Conduct recurring security activities: log reviews, account reviews, and continuous monitoring.
• Support RMF/ATO activities with documentation and evidence package.
• Review system and configuration changes for security impact.

Skills

Windows Server 2016/2019

Active Directory

Networking basics

Security monitoring

Vulnerability management

System hardening

Education

Bachelor's degree

Tools

ACAS

Tenable/Nessus

Splunk

McAfee HBSS

Job description

Leidos is seeking a Junior Security Engineer to support day-to-day security activities across enterprise environments. This 100% on-site role focuses on vulnerability management, RMF/ATO activities, and continuous monitoring, working with senior security personnel and other engineering teams.

You will gain exposure to DISA STIGs, system hardening, and security logging while contributing to the overall security posture and ongoing improvement effort at customer sites.