Vulnerability Analyst - TS/SCI Secure Cloud & RMF Expert

Leidos LLC; Arlington (VA); On-site; USD 70,000 - 126,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave

Retirement

Job summary

Leidos in Arlington, VA seeks a Vulnerability Analyst to support the CESO program. The role focuses on vulnerability management, RMF documentation, and security policy enforcement on a 100% on-site basis.

Qualified candidates will hold a TS/SCI clearance with IAT Level II and have experience with DISA, IAVA, and ACAS/Splunk/eMASS tools. The position is located in Arlington, VA, with emphasis on a secure, compliant cloud migration strategy.

Qualifications

• Bachelor's degree required; 2+ years IT security experience preferred.
• Active TS/SCI clearance with at least IAT Level II (e.g., Security+ CE) at start.
• Experience with DISA security models, controls, and authorization processes.
• Experience creating Information Assurance documentation (SCTM, RAR, SAR) and POA&M.

Responsibilities

• Meet regulatory and non-regulatory compliance demands across CESO environment.
• Assist in management of IAVA program for CESO systems.
• Manage and enforce information security policies; train end-users on security practices.
• Conduct security and risk assessments using NIST, RMF, and Common Criteria; implement security controls.
• Develop and maintain RMF documentation from customer data.
• Oversee vulnerability management, incident response, business continuity, and disaster recovery.

Skills

Vulnerability management

Regulatory compliance

Security policy enforcement

End-user training

IAVA program experience

RMF familiarity

Education

Bachelor's degree

Tools

ACAS

Splunk

eMASS

Job description

Leidos in Arlington, VA seeks a Vulnerability Analyst to support the CESO program. The role focuses on vulnerability management, RMF documentation, and security policy enforcement on a 100% on-site basis.

Qualified candidates will hold a TS/SCI clearance with IAT Level II and have experience with DISA, IAVA, and ACAS/Splunk/eMASS tools. The position is located in Arlington, VA, with emphasis on a secure, compliant cloud migration strategy.