Lead Security Engineer — Vulnerability & RMF

Leidos; Bethesda (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Senior Security Engineer to serve as the technical lead for day-to-day security activities supporting enterprise and isolated environments. This on-site role requires leadership across security operations, vulnerability management, RMF/ATO support and continuous monitoring to maintain a robust security posture.

You will mentor security personnel, translate requirements into actionable work, and collaborate with ISSM, program leadership, and technical teams to protect systems.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• DoD 8570.11 IAT Level II certification requirements (Security+ CE, CCNA-Security, GSEC, or SSCP) and a computing environment certification.
• Active TS/SCI clearance with Polygraph required OR active TS/SCI and willingness to get a Poly.
• US Citizenship is required due to the nature of the government contracts.

Responsibilities

• Lead and coordinate day-to-day security operations, establish priorities and assign and track activities across the security team.
• Provide technical leadership and guidance to security personnel, system administrators, engineers and other technical teams.
• Lead vulnerability management from identification through closure, including analysis, prioritization, remediation, validation and documentation.
• Coordinate vulnerability remediation across Windows, Linux, network, desktop support and other engineering teams and provide hands-on support for complex or high-priority issues as needed.
• Oversee and perform vulnerability scanning and analysis using ACAS, Tenable/Nessus or equivalent technologies.
• Oversee implementation and validation of DISA STIGs and approved security configuration baselines across infrastructure systems.
• Ensure recurring security activities are performed, including audit log and account reviews, vulnerability reviews, security control validation and continuous monitoring.
• Support and oversee RMF/ATO activities, including security documentation, control evidence, BoE, POA&Ms and compliance with NIST SP 800-53, ICD 503 and applicable security directives.
• Work with the ISSM to translate security and compliance requirements into technical and operational activities and evaluate system or configuration changes for potential security impact.
• Provide security oversight and technical support for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening and security monitoring.
• Review security logs and events using Splunk or equivalent SIEM/log-management technologies and ensure identified issues are appropriately addressed.
• Develop and maintain repeatable security processes and procedures for vulnerability management, compliance monitoring, evidence collection and security operations.
• Track security risks, deficiencies, remediation activities and compliance status and communicate status, risks and recommendations to customer and program leadership.
• Participate in TEMs, security reviews, engineering meetings and customer discussions related to system security and accreditation.
• Manage, supervise and mentor security and technical staff as assigned.

Skills

Security operations

Vulnerability management

Team leadership

Incident response

Documentation and diagrams

Education

Bachelor's degree in Computer Science/Information Technology

Tools

ACAS

Tenable/Nessus

Splunk

DISA STIGs

Job description

Leidos is seeking a Senior Security Engineer to serve as the technical lead for day-to-day security activities supporting enterprise and isolated environments. This on-site role requires leadership across security operations, vulnerability management, RMF/ATO support and continuous monitoring to maintain a robust security posture.

You will mentor security personnel, translate requirements into actionable work, and collaborate with ISSM, program leadership, and technical teams to protect systems.