Information Systems Security Officer

Leidos currently has an opening for an Information System Security Officer to work in our Columbia, MD office supporting our Intelligence Sector's Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management.

At Leidos, we offer competitive benefits Leidos Pay and Benefits, including 4 or more weeks Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more.  Join us and make a difference in National Security!  

This position requires an individual who can work independently and collaboratively in a team-oriented environment.  The ISSO will support daily security operations, monitor system compliance, maintain security controls, and ensure information systems meet established security policies and regulatory requirements.   We are seeking a motivated, detail-oriented Information System Security Officer (ISSO) to join our cybersecurity team. The ideal candidate will have prior experience in information systems security, system administration, or a related technical field, along with strong communication, analytical, organizational, and problem-solving skills.

  Primary Responsibilities:

• Assist the Information System Security Manager (ISSM) with information assurance efforts, and systems across numerous environments.
• Support continuous monitoring activities, including vulnerability management, configuration compliance, patch coordination, security scan analysis, and verification of remediation efforts.

• Maintain and update security authorization documentation, including System Security Plans, (SSPs), security control narratives, network diagrams, inherited controls, Configuration Management (CM) Plans, Incident Response Plan (IRPs), Contingency Plan (CPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Collaborate with System Owner, System Administrators, Information System Security Engineer (ISSE), and other stakeholders to address security concerns, resolve vulnerabilities, maintain system compliance, and support cybersecurity requirements.
• Perform security compliance and vulnerability assessment using tools such as Nessus, Splunk, and Security Content Automation Protocol (SCAP) scanning tools to identify vulnerabilities, assess system compliance, and track remediation efforts.

• Support incident response and reporting participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learned.

Basic Qualifications:

• Bachelor’s degree is highly desired. In lieu of bachelor’s degree Leidos will consider candidates on a case by case basis and additional experience will be required. High school diploma or equivalent required.
• Minimum of four (4) years of relevant experience in information system security, cybersecurity, system administration, or a related technical field.
• Proficiency in Microsoft Office applications, particularly Word, Excel, and Outlook, for documentation, reporting, and tracking security-related activities.
• Ability to adapt quickly to changing priorities, respond effectively to unexpected changes, and manage multiple tasks in a fast-past environment.
• Understanding of Risk Management Framework (RMF), National Institute of Standards and Technology (NIST) and Committee on National Security Systems (CNSS) cyber security requirements and guidance, cyber security related risk management techniques.
• Certifications & Compliance: DoD 8570 compliance with IAM Level I, IAM Level II, or IAT Level III (Security+, SecurityX, CISM, CISSP, or Associate).

·        Clearance Requirement: Must hold an active TS/SCI with Polygraph

Preferred Qualifications:

• Previous experience in system administration, including system configuration, maintenance, troubleshooting, and security support, is a plus.
• Experience using the Enterprise Mission Assurance Support Service Support Service (eMass) to support Risk Management Framework (RMF) activities, security authorization documentation, and compliance tracking.
• Experience with NIST Risk Management Framework (RMF), NIST SP 800-53 security controls, and maintaining security authorizations documentation.
• Familiarity with DISA Security Technical Implementation Guides (STIGs), vulnerability management, and Plan of Action and Milestones (POA&M) tracking and remediation.

• Current DoD 8140.03 compliance with IAT Level I or higher (e.g., Security+, CASP, CISM or CISSP).
• Vulnerability assessment and analysis experience utilizing SCAP, NESSUS and DISA STIGs.

Work Environment:

This position requires on-site work five days per week at the Columbia, MD location, with established core business hours from 09:00 a.m. to 3:00 p.m. Local travel between company facilities and customer sites is required to support operational and cybersecurity activities as needed.

conmd

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.