Senior Network Security Engineer: Vulnerability & STIG Lead

Leidos; Washington (District of Columbia); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos seeks a Network Engineer to lead vulnerability management and STIG compliance for NMCI network infrastructure, providing technical leadership and making patch deployment decisions after lab validation. Ensure 72-hour SLA across 40+ solution types supporting thousands of production devices.

The role requires a BS degree with 8–12 years in network security and vulnerability management, U.S. citizenship with active Secret clearance, and expertise in F5, Cisco, and enterprise firewalls.

Qualifications

• B.S. degree required; 8–12 years of network security and vulnerability management experience.
• U.S. Citizen with an active Secret clearance.
• Expert knowledge of F5, Cisco, firewalls, and enterprise network infrastructure.
• DoD STIG compliance and audit experience.
• Strong vendor relationship and escalation management skills.
• CISSP, CCNP, or equivalent certifications preferred.

Responsibilities

• Own vulnerability management program strategy and execution.
• Approve/reject patch deployments based on lab validation results.
• Lead quarterly STIG compliance assessments and audit preparation.
• Engage vendors at executive/technical levels for escalations.
• Mentor and develop mid-level and junior engineers.
• Report program status, risks, and metrics to senior leadership.
• Lead emergency response to zero-day vulnerabilities and critical patches.
• 72-hour patch SLA compliance (>90%).
• 100% completion of quarterly STIG assessments (160/year).
• Quality of patch approvals - accountable for production impact.
• Team performance, development, and retention.
• DoD/Navy audit readiness and compliance.

Skills

Network security

Vulnerability management

STIG compliance

F5

Cisco

Enterprise firewalls

Leadership

Vendor management

Education

B.S. Degree

8-12 years experience

Tools

F5

Cisco

Enterprise network infra

Job description

Leidos seeks a Network Engineer to lead vulnerability management and STIG compliance for NMCI network infrastructure, providing technical leadership and making patch deployment decisions after lab validation. Ensure 72-hour SLA across 40+ solution types supporting thousands of production devices.

The role requires a BS degree with 8–12 years in network security and vulnerability management, U.S. citizenship with active Secret clearance, and expertise in F5, Cisco, and enterprise firewalls.