Lead Network Security Engineer - Vulnerability & STIG

Leidos; Washington (District of Columbia); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos in Washington, DC seeks a Network Engineer to lead vulnerability management and STIG compliance for NMCI infrastructure. You will provide technical leadership and approve patch deployments to meet a 72-hour SLA across 40+ solution types supporting thousands of production devices.

You will mentor engineers, engage vendors at executive/technical levels, and report program status and risks to senior leadership. A BS and 8–12 years of network security experience, U.S.

Qualifications

• 8–12 years of network security and vulnerability management experience
• Must be a U.S. Citizen and possess an active Secret clearance
• Expert knowledge of F5, Cisco, firewalls, and enterprise network infrastructure
• DoD STIG compliance and audit experience
• Strong vendor relationship and escalation management skills

Responsibilities

• Own vulnerability management program strategy and execution.
• Approve or reject patch deployments based on lab validation results.
• Lead quarterly STIG compliance assessments and audit preparation.
• Engage vendors for escalations at executive/technical levels.
• Mentor and develop mid-level and junior engineers.
• Report program status, risks, and metrics to senior leadership.
• Lead emergency response to zero-day vulnerabilities and critical patches.
• 72-hour patch SLA compliance (>90%).
• 100% completion of quarterly STIG assessments (160/year).
• Quality of patch approvals and production impact accountability.

Skills

Vulnerability management

Network security

Leadership

Vendor management

Mentoring

Education

Bachelor's degree or equivalent experience

CISSP/CCNP certifications preferred

Tools

F5 BIG-IP

Cisco devices

Firewalls

Job description

Leidos in Washington, DC seeks a Network Engineer to lead vulnerability management and STIG compliance for NMCI infrastructure. You will provide technical leadership and approve patch deployments to meet a 72-hour SLA across 40+ solution types supporting thousands of production devices.

You will mentor engineers, engage vendors at executive/technical levels, and report program status and risks to senior leadership. A BS and 8–12 years of network security experience, U.S.