Onsite CSSP Analyst & SAV Specialist (DoD)

Leidos; Alexandria (VA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos in Alexandria, VA, seeks a CSSP Analyst/SAV Analyst on the JSP Cyber Security Task Order to support DoD information security for OSD and Joint Staff. The role is onsite with eligibility for a Secret clearance (TS/SCI). Partial remote work may be allowed at leadership discretion.

Responsibilities include conducting audits, vulnerability assessments, and CCORI/CCRI-related activities, managing POA&Ms, and ensuring regulatory compliance across networks, PKI, and NATO standards.

Qualifications

• Bachelor's degree in Science or Engineering with 8+ years of experience.
• DoD 8570 IAT Level II certification.
• Active Secret (TS/SCI eligible) security clearance prior to start.

Responsibilities

• Conduct cybersecurity audits, inspections, vulnerability assessments, and compliance reviews.
• Perform Site Assistance Visits (SAVs) to ensure regulatory compliance with CCORI, PKI, NATO, and BSA.
• Track and report inspection findings and POA&Ms until remediation is complete.
• Identify systems needing manual assessments to ensure proper evaluation for compliance.
• Maintain Post Inspection Finding Remediation and POA&M status reports.
• Validate remediation artifacts and POA&Ms with inspecting organizations for approval.
• Evaluate CCRI areas including network infrastructure, DNS, vulnerability scanning, and cross-domain solutions.

Skills

Cybersecurity audits

Vulnerability assessments

Regulatory compliance

Project management

Education

Bachelor's degree in Science or Engineering

Job description

Leidos in Alexandria, VA, seeks a CSSP Analyst/SAV Analyst on the JSP Cyber Security Task Order to support DoD information security for OSD and Joint Staff. The role is onsite with eligibility for a Secret clearance (TS/SCI). Partial remote work may be allowed at leadership discretion.

Responsibilities include conducting audits, vulnerability assessments, and CCORI/CCRI-related activities, managing POA&Ms, and ensuring regulatory compliance across networks, PKI, and NATO standards.