Senior DoD STIG & RMF Security Tester

Leidos LLC; Fort Meade (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Cyber Security STIG Tester to join our GSMO-II team at Ft. Meade, MD.

The role focuses on performing and reviewing security assessments using STIG checklists, SCAP scans, and ACAS/ESS scans to identify vulnerabilities and non-compliance with IA guidelines. The candidate will contribute to RMF STIG and compliance testing, coordinate risk mitigation with system admins, and provide reporting for security briefings.

Qualifications

• Bachelor’s degree and 8+ years of related experience.
• Experience with STIG compliance and SCAP tools.
• Experience with vulnerability and assessment scans.
• Familiarity with eMASS and/or Xacta.
• Strong RMF and SDLC understanding.
• Security clearance: Secret.

Responsibilities

• Ensure STIG Checklists are up to date and settings are enforced with minimal operational impact for all systems.
• Support systems with up-to-date STIG Checklist and educate admins on completion/edits.
• Examine results of STIG testing and pass results to owners/admins.
• Track response times to STIG findings and report on security briefing.
• Support POA&M analysis and coordination including eMASS updates.
• Perform cybersecurity lab testing/hardening for deployments and updates.
• Review data from ACAS/ESS scans and adjust scans for new equipment.
• Maintain SOPs for testing and reporting activities.
• Support testing events and preparations for tests.
• Perform vulnerability/risk analyses during all SDLC phases.
• Assist AO actions with RMF-compliant artifacts.

Skills

Analytical thinking

Problem-solving

Communication skills

Team collaboration

Education

Bachelor's degree in related field

Tools

SCAP tools

eMASS

Xacta

ACAS/ESS

STIG Checklists

RMF tooling

Job description

Leidos is seeking a Cyber Security STIG Tester to join our GSMO-II team at Ft. Meade, MD.

The role focuses on performing and reviewing security assessments using STIG checklists, SCAP scans, and ACAS/ESS scans to identify vulnerabilities and non-compliance with IA guidelines. The candidate will contribute to RMF STIG and compliance testing, coordinate risk mitigation with system admins, and provide reporting for security briefings.