Senior STIG & RMF Security Tester (DoD)

Leidos; Odenton (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Cyber Security STIG Tester to join our GSMO-II team at Ft. Meade, MD. This role performs technical security assessments using STIG Checklists, SCAP scans, and ACAS/ESS scans to identify vulnerabilities and ensure compliance with DoD IA guidelines.

The candidate will analyze results, coordinate with system owners, and contribute to RMF STIG testing and reporting for security briefings. You will also ensure readiness for RMF authorization, coordinate with administrators, and

Qualifications

• Bachelor’s degree and 8+ years of experience; additional years of directly applicable experience may be accepted in lieu of a degree.
• Prior relevant experience working with STIG Compliance, SCAP tools, vulnerability assessments and reporting.
• Experience using eMASS and/or Xacta.
• Solid understanding of the Risk Management Framework (RMF) and the System Development Life Cycle (SDLC).

Responsibilities

• Ensure STIG Checklists are up to date and settings are enforced with minimal operational impact for all systems.
• Educate systems/network administrators regarding completion/edits as required.
• Examine results of STIG testing and pass results to system owners and system administrators.
• Track response times to STIG findings and report on the security briefing.
• Support POA&M analysis and coordination efforts, as required, including eMASS updates.
• Perform cybersecurity lab testing/hardening activities supporting deployment of/updates to computer systems and applications.
• Review data from ACAS/ESS scans and set tickets to add new equipment into scans as necessary.
• Maintain SOP’s for testing and reporting activities.
• Support functional testing as necessary for new technology.
• Support testing events and preparation for testing events.
• Perform vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.
• Support Authorizing Official (AO) actions by ensuring all testing related security testing artifacts are presented in accordance with RMF as defined in NIST 800-37 revision 2 and related agency specific RMF requirements.
• Have experience performing various types of vulnerability and assessment scans with multiple tools.

Skills

RMF knowledge

SDLC understanding

Analytical thinking

Problem solving

Education

Bachelor’s degree

Tools

SCAP tools

eMASS

Xacta

ACAS

Job description

Leidos is seeking a Cyber Security STIG Tester to join our GSMO-II team at Ft. Meade, MD. This role performs technical security assessments using STIG Checklists, SCAP scans, and ACAS/ESS scans to identify vulnerabilities and ensure compliance with DoD IA guidelines.

The candidate will analyze results, coordinate with system owners, and contribute to RMF STIG testing and reporting for security briefings. You will also ensure readiness for RMF authorization, coordinate with administrators, and