Senior Cybersecurity STIG Tester

Leidos Inc; Odenton (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos Inc. is seeking a Cyber Security STIG Tester to join the GSMO-II team at Fort Meade, MD.

The role requires performing security assessments using STIG checklists, SCAP scans, and ACAS/ESS scans to identify and mitigate vulnerabilities, ensuring DoD IA guidelines and RMF compliance across systems. The candidate will develop secure architectures, participate in risk assessment mitigation, and provide reporting for security briefings.

Qualifications

• Bachelor's degree and 8+ years of experience in cybersecurity or related field.
• Experience with STIG Compliance, SCAP tools, vulnerability assessments and reporting.
• Experience using eMASS and/or Xacta.
• Solid understanding of RMF and SDLC.

Responsibilities

• Ensure STIG Checklists are up to date and settings are enforced with minimal operational impact for all systems.
• Support systems to have up-to-date STIG Checklists and educate admins as required.
• Examine STIG test results and relay findings to system owners and admins.
• Track response times to STIG findings and prepare security briefings.
• Support RMF/POA&M analyses and eMASS updates as required.
• Perform cybersecurity lab testing and hardening for deployments.
• Review ACAS/ESS data and manage tickets for new equipment in scans.
• Maintain SOPs for testing and reporting activities.
• Support testing events and preparation for testing events.
• Perform vulnerability/risk analyses across SDLC phases.
• Assist AO actions by ensuring artifacts meet RMF requirements.

Skills

STIG Compliance

SCAP tools

Vulnerability assessments

eMASS

Xacta

RMF

SDLC

Analytical skills

Problem solving

Security testing

Education

Bachelor's degree

Tools

SCAP tools

eMASS

Xacta

ACAS

Job description

Leidos Inc. is seeking a Cyber Security STIG Tester to join the GSMO-II team at Fort Meade, MD.

The role requires performing security assessments using STIG checklists, SCAP scans, and ACAS/ESS scans to identify and mitigate vulnerabilities, ensuring DoD IA guidelines and RMF compliance across systems. The candidate will develop secure architectures, participate in risk assessment mitigation, and provide reporting for security briefings.