Vulnerability Analyst: Secure Cloud & Compliance Specialist

Leidos Inc; Arlington (VA); On-site; USD 70,000 - 126,000; Full time

Job summary

Leidos seeks a Vulnerability Analyst to join the Compartmented Enterprise Services Office (CESO) in Arlington, VA. This on-site role supports vulnerability management, risk assessment, and compliance across a secure cloud migration, leveraging RMF, NIST, and CISA guidance.

Responsibilities include managing IAVA programs, enforcing security policies, conducting risk assessments, preparing SCTM, RAR, SAR, and maintaining POA&Ms, plus coordinating with infrastructure teams to align activities with

Qualifications

• Bachelor's degree in a related IT field.
• Active TS/SCI clearance
• DoDD 8140 compliant certification at minimum IAT Level II (e.g., Security+ CE)
• Experience with DISA security model, controls, and DoD cloud computing
• Experience with Information Assurance Vulnerability Alerts (IAVA) and related documentation (SCTM, RAR, SAR, POA&Ms)
• Experience with ACAS and SEIM tools

Responsibilities

• Meet regulatory and non-regulatory compliance demands across CESO environment.
• Assist in the management and maintenance of the IAVA program for CESO systems.
• Manage and enforce information security policies and train end-users on security practices.
• Conduct security and risk assessments using NIST, RMF, and Common Criteria; mitigate risk with controls and testing.
• Develop, update, and track RMF documentation from customer inputs.
• Perform vulnerability management activities (scanning, assessment, reporting, mitigation).
• Coordinate with infrastructure, storage, database, and application teams to align vulnerability management with CESO requirements.
• Maintain documentation and compliance reports supporting secure cloud migration.
• Protect information and controls across the CESO system to reduce risk.

Skills

Active TS/SCI clearance

IAT Level II Certification

DISA security model experience

IAVA program experience

ACAS and SEIM tools

Vulnerability management

Education

Bachelor's degree

Tools

ACAS

Splunk

eMASS

Job description

Leidos seeks a Vulnerability Analyst to join the Compartmented Enterprise Services Office (CESO) in Arlington, VA. This on-site role supports vulnerability management, risk assessment, and compliance across a secure cloud migration, leveraging RMF, NIST, and CISA guidance.

Responsibilities include managing IAVA programs, enforcing security policies, conducting risk assessments, preparing SCTM, RAR, SAR, and maintaining POA&Ms, plus coordinating with infrastructure teams to align activities with