Senior Network Security Engineer: Vulnerability & STIG Lead

Leidos; San Diego (CA); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos is seeking a Network Engineer to lead vulnerability management and the STIG compliance program for NMCI network infrastructure. You will provide technical leadership, decide on patch deployments, and ensure a 72-hour SLA across 40+ solution types supporting thousands of production devices. The role requires a BS degree with 8–12 years of network security experience, U.S.

citizenship, and an active Secret clearance. Certifications like CISSP/CCNP are preferred.

Qualifications

• Requires B.S. Degree and 8–12 years network security and vulnerability management experience.
• Must be a U.S. Citizen with an active Secret clearance.
• CISSP, CCNP, or equivalent certifications preferred.
• DoD STIG compliance and audit experience.

Responsibilities

• Own vulnerability management program strategy and execution.
• Approve/reject patch deployments based on lab validation results.
• Lead quarterly STIG compliance assessments and audit preparation.
• Engage vendors at executive/technical levels for escalations.
• Mentor and develop mid-level and junior engineers.
• Report program status, risks, and metrics to senior leadership.
• Lead emergency response to zero-day vulnerabilities and critical patches.
• Ensure 72-hour patch SLA compliance and >90% completion of quarterly STIG assessments.

Skills

Network security

Vulnerability management

STIG compliance

Vendor management

Leadership

Education

B.S. Degree

Tools

F5

Cisco

Firewalls

Job description

Leidos is seeking a Network Engineer to lead vulnerability management and the STIG compliance program for NMCI network infrastructure. You will provide technical leadership, decide on patch deployments, and ensure a 72-hour SLA across 40+ solution types supporting thousands of production devices. The role requires a BS degree with 8–12 years of network security experience, U.S.

citizenship, and an active Secret clearance. Certifications like CISSP/CCNP are preferred.