Vulnerability Analyst — Secure Cloud RMF Specialist

Careerwebsite; Arlington, Northern (VA, KY); Hybrid; USD 70,000 - 126,000; Full time

Job summary

Leidos in Arlington, VA is seeking a Vulnerability Analyst to join the CESO team. The role focuses on enforcing security controls, conducting risk assessments, and maintaining RMF documentation for a secure cloud migration.

Requires TS/SCI clearance and DoDD 8140/IAT II certification; experience with ACAS, SEIM tools, and IAVA reporting is preferred. This is an on-site position with responsibility across multiple DoD security domains.

Qualifications

• Bachelor's degree and 2+ years of related IT security experience; additional experience, education, or training may be considered in lieu of degree.
• Active TS/SCI security clearance required
• DoDD 8140 compliant certification, at minimum IAT Level II (e.g., Security+ CE), at start.
• Experience with DISA security model, controls, and authorization processes for standard computing systems and cloud computing across the DoD
• Experience with IAVA and related reporting (CISA)
• Experience creating IA documentation such as SCTM, RAR, SAR and maintaining POA&Ms
• Experience with ACAS and SEIM tools
• Experience with security settings for vendor/DISA best practices
• Candidate may be asked to obtain a CI Polygraph in the future

Responsibilities

• Meet regulatory and non-regulatory compliance demands across the CESO environment.
• Assist in management and maintenance of the IAVA program for CESO systems.
• Manage and enforce information security policies and train end-users on security practices.
• Conduct security and risk assessments using RMF, NIST, Common Criteria; mitigate risk via controls and testing.
• Develop, update, and track RMF documentation from customer data.
• Ensure data privacy; perform vulnerability management, business continuity, and disaster recovery activities.
• Coordinate with infrastructure, storage, database, and app teams to align vulnerability activities.
• Maintain documentation and compliance reports supporting CESO's secure cloud migration.
• Protect information and maintain security controls to reduce risk across CESO system/site/program

Skills

Regulatory compliance

Risk assessment

Security training

Vulnerability management

Education

Bachelor's degree

Tools

ACAS

SEIM tools

Splunk

eMASS

Job description

Leidos in Arlington, VA is seeking a Vulnerability Analyst to join the CESO team. The role focuses on enforcing security controls, conducting risk assessments, and maintaining RMF documentation for a secure cloud migration.

Requires TS/SCI clearance and DoDD 8140/IAT II certification; experience with ACAS, SEIM tools, and IAVA reporting is preferred. This is an on-site position with responsibility across multiple DoD security domains.