On-Site Vulnerability & Cloud Security Analyst (TS/SCI)

Leidos; Arlington (VA); On-site; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking a Vulnerability Analyst to support the CESO effort in Arlington, VA. This 100% on-site role requires TS/SCI clearance and will manage vulnerability management, risk assessments, and compliance across a secure cloud migration.

You will work with RMF, NIST frameworks, IAVA processes, and various security controls, coordinating with infrastructure, storage, database, and applications teams to implement robust security measures.

Qualifications

• Bachelor's degree and 2+ years of related IT security experience (or equivalent).
• Active TS/SCI security clearance required to start.
• DoDD 8140 compliant certification at least IAT Level II (e.g., Security+ CE).
• Experience with DISA security model, controls, and DoD cloud computing processes.
• Experience with IAVA program development and reporting.

Responsibilities

• Meet regulatory and non-regulatory compliance demands across the CESO environment.
• Assist in managing the IAVA program for CESO systems.
• Develop and enforce information security policies; train end-users on security practices.
• Conduct security and risk assessments using NIST, RMF, and Common Criteria; mitigate risk via controls and testing.
• Maintain RMF documentation; coordinate with customers to obtain information.
• Oversee vulnerability management including scanning, assessment, reporting, and mitigation verification.
• Coordinate with infra, storage, DB, and app teams to align vulnerability activities with compliance.
• Maintain CESO documentation and compliance reports for secure cloud migration.
• Protect information and maintain security controls across CESO systems.

Skills

Security clearance

IAVA management

RMF knowledge

Education

Bachelor's degree

Tools

ACAS

SEIM tools

SCTM

RAR/SAR

POA&M

RMF

NIST framework

DISA security model

Job description

Leidos is seeking a Vulnerability Analyst to support the CESO effort in Arlington, VA. This 100% on-site role requires TS/SCI clearance and will manage vulnerability management, risk assessments, and compliance across a secure cloud migration.

You will work with RMF, NIST frameworks, IAVA processes, and various security controls, coordinating with infrastructure, storage, database, and applications teams to implement robust security measures.