Senior ISSE/Penetration Tester TS/SCI Polygraph

Leidos; United States; On-site; USD 131,300 - 237,350; Full time

Benefits offered by this job

Competitive compensation

Health and wellness programs

Retirement benefits

Job summary

Leidos has an exciting opening for a Senior ISSE/Penetration Tester in the United States. The ideal candidate will lead penetration testing efforts and enhance security capabilities, requiring a background of at least 12 years in relevant fields such as Cybersecurity. Knowledge of security policies and practices using tools like Nessus and NMAP is essential.

The role involves collaborating with engineers and program managers while addressing security compliance and vulnerabilities across systems.

Qualifications

• 12 years of relevant experience in security testing.
• Extensive knowledge of security tools and practices.
• Experience with Defense in Depth principles.

Responsibilities

• Lead and conduct penetration testing.
• Collaborate with technical experts to address security issues.
• Evaluate security solutions against compliance policies.

Skills

Common security tools

Vulnerability testing

Security practices and policies

Strong communication skills

Education

Bachelor's degree in Computer Science or related

Tools

Nessus

NMAP

Wireshark

Job description

Senior ISSE/Penetration Tester

Leidos has an exciting and challenging opportunity for a Senior ISSE/Penetration Tester in our Intel Sector's Cyber & Analytics Business Area (CABA). Our team is at the forefront of Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management.

Job Summary

A Senior ISSE/Penetration Tester (ISSE/PT) will support adding new capabilities to complex systems, working within a team of Security Engineers to solve challenging issues on a large program. The role requires a solid understanding of security practices and policies and hands‑on vulnerability testing experience. Responsibilities include leading and conducting penetration testing, publishing results, and researching tools to enhance testing capabilities.

Primary Responsibilities

• Validating and verifying system security requirements and establishing system security designs for large‑scale systems, major system elements, and interfacing systems in a complex network environment with geographically distributed components.
• Identifying and implementing appropriate information security architectures and functionality to ensure uniform application of security policy and enterprise solutions.
• Recommending and developing technical solutions, products, and standards based on current and desired system security architecture.
• Assessing and mitigating system security threats and risks throughout the program life cycle.
• Leading and/or contributing to the security planning, assessment, risk analysis, risk management, certification, and awareness activities for various system and networking operations.
• Collaborating with multiple internal technical experts and communicating with Program Managers and customer POCs regarding significant security issues.
• Working closely with System Engineering, Test Engineering, and Integration teams to ensure hardware and software architectures meet security requirements.
• Analyzing and assessing system implementation against multiple security compliance policies and recommending enhancements.
• Evaluating security solutions to ensure they meet customer specified requirements for processing information.
• Assessing the impact of new development on the operational security posture of the system.
• Reviewing and testing critical software.
• Proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
• Auditing and assessing system security configuration settings using common methodologies and tools.
• Managing and enforcing security strategies and policies affecting geographically distributed systems.
• Participating in Program Increment Planning and related agile team activities.
• Providing configuration management for security‑relevant information system software.
• Serving as a subject‑matter expert in security architecture, advising Program Managers, customer technical experts, and internal teams.
• Formulating security compliance requirements for new system features.
• Identifying and remediating security issues throughout the system.
• Supporting risk assessment, risk management, security control assessment, continuous monitoring, service design, and other IA program support functions.
• Working with development teams to enrich understanding of vulnerabilities, attack vectors, and remediation approaches.
• Planning and conducting security verification testing of relevant type 1 devices.
• Performing internal and external penetration tests against systems to determine vulnerabilities and develop mitigation strategies.
• Performing web application penetration tests.
• Conducting vulnerability risk assessments.
• Performing physical penetration tests and security engineering analysis, assessing vulnerabilities and solutions.

Basic Qualifications

• Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline, and at least 12 years of relevant experience (experience may substitute for a degree).
• Extensive knowledge and experience with common security tools such as Nessus, NMAP, Wireshark, and hardware/software security implementation.
• In‑depth understanding and experience with security practices and policies and hands‑on vulnerability testing using Tenable Nessus and/or Nmap.
• Experience with Defense in Depth principles, including access control, authentication, public key infrastructure, network and enterprise security architecture, and risk assessment methodology.
• Experience applying the Risk Management Framework.
• Experience formulating and assessing IT security policy.
• Experience with secure configurations of commonly used desktop and server operating systems.
• Experience with penetration testing tools.
• Experience developing and implementing integrated security services management processes, including auditing network penetration testing, anti‑virus planning assistance, risk analysis, and incident response.
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls.
• Comfortable working on multiple systems and components simultaneously in various configurations.
• Strong planning, prioritization, and communication skills regarding technical options and trade‑offs.
• Capable of performing high‑quality work independently and within a team in a fast‑moving environment.
• Strong verbal and written communication skills.
• Committed to adopting and adhering to best practices.

Clearance Required

• Must have TS/SCI with Polygraph.

Preferred Qualifications

• DoD 8570 compliance with IASAE Level 2 or 3.
• Information Systems Security Engineering Professional (ISSEP) Certification and/or Computer Information Systems Security Professional (CISSP) Certification.
• Experience with scripting languages.
• Certifications: GIAC Web Applications Penetration Tester (GWAPT), GIAC Penetration Tester (GPEN), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Web Application Defender (GWEB), Certified Information System Security Professional (CISSP).

Pay Range

$131,300.00 - $237,350.00

Pay and Benefits

Competitive compensation, health and wellness programs, income protection, paid leave, and retirement benefits. Additional details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.