Senior Cyber ISSO — RMF & Authorization Expert

Leidos LLC; Fort Meade (MD); Vor Ort; USD 131.000 - 237.000; Vollzeit

Zusammenfassung

Leidos is seeking a Senior Cyber Specialist to serve as an Information System Security Officer (ISSO) responsible for the day-to-day security posture, authorization, and continuous monitoring of enterprise information systems. The ISSO owns security control implementation and accreditation artifacts and serves as the principal point of contact for cybersecurity matters affecting those systems.

This role requires translating technical risk into defensible control documentation and working between

Qualifikationen

• Bachelor's degree or equivalent experience; Master's considered with 10+ years.
• Current IAT Level II or higher certification (Security+ or CISSP).
• Active DoD Secret clearance.

Aufgaben

• Serve as ISSO for assigned systems, maintaining the system security posture and executing RMF activities across categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and defend authorization packages, including the System Security Plan, control implementation statements, risk assessment reports, and POA&Ms.
• Oversee vulnerability management, DISA STIG/compliance, and continuous monitoring; track remediation and compliance timelines.
• Partner with engineering teams to ensure security requirements are designed in rather than retrofitted; advise leadership on risk and remediation options.
• Develop and maintain cybersecurity documentation and evidence for audits, including risk analyses and incident response plans.

Kenntnisse

IAT Level II certification

DoD Secret clearance

Ausbildung

Bachelor's degree or equivalent experience

Master's degree (optional)

Jobbeschreibung

Leidos is seeking a Senior Cyber Specialist to serve as an Information System Security Officer (ISSO) responsible for the day-to-day security posture, authorization, and continuous monitoring of enterprise information systems. The ISSO owns security control implementation and accreditation artifacts and serves as the principal point of contact for cybersecurity matters affecting those systems.

This role requires translating technical risk into defensible control documentation and working between