Information System Security Engineer

Leidos is seeking an Information System Security Engineer (ISSE) to support cybersecurity authorization efforts for the Service Management, Integration, and Transport (SMIT) program—the largest IT services program for the Navy. Under SMIT, the Leidos team delivers the core backbone of the Navy's enterprise network (NMCI), including cybersecurity services, network operations, service desk, and data transport. The program unifies shore-based networks and data management to improve capability, service, and cost efficiency under one enterprise network.

Responsibilities

• Serve as a primary Information System Security Engineer (ISSE) for Authorization to Operate (ATO) packages under the Navy Risk Management Framework (RMF).
• Assist in the development and review of ATO submissions; coordinate updates and corrections to assessment and authorization (A&A) artifacts.
• Evaluate software and hardware during pre-acquisition phases to ensure compliance with NIST SP 800-53 Rev 5 security controls.
• Author, review, coordinate, and submit cybersecurity authorization artifacts to eMASS (including change requests) to achieve milestones such as Interim Authority to Test (IATT) and ATO in accordance with the project schedule.
• Support cybersecurity authorization activities to comply with DoDI 8500.01, DON 5239, the RMF Process Guide, and the RMF Risk Assessment Guide.
• Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.
• Verify patch compliance using ACAS, IAVA compliance dashboards, and Microsoft Defender for Endpoints; coordinate with local administrators to troubleshoot and resolve patching issues.
• Assist with the implementation of security procedures and verify information system security requirements, including coordinating the execution, review, and disposition of Security Technical Implementation Guide (STIG) checklists.
• Independently develop and maintain system security documentation, including SOPs, TTPs, POA&Ms, and FISMA Score Cards.
• Participate in regular briefings with the customer on cybersecurity statuses and prepare briefing materials.
• Support site visits and audits, including System Readiness Reviews (SRR).
• Ensure secure, effective, and efficient operation of network systems, architecture, and topology.
• Assist with the development and application of business processes to ensure appropriate security levels.
• Participate in strategic network, security, and operations new technology planning.
• Assist engineering managers in employing approved defense-in-depth principles and practices.
• Document Ports, Protocols, and Services (PPS), ensuring accurate dataflows, compliant CAL boundaries, and AO registrations per DODI 8551.1.

Requirements

• U.S. Citizen with an active DoD Secret Clearance.
• Active security certification that meets DOD 8570 IAT level III or higher.
• Bachelor’s degree and 4 years of prior relevant experience (or Master’s with 2 years) in Cybersecurity, Information Security, IT, EE, Network Engineering, Computer Science, or related field.
• Complete understanding of RMF steps, especially Steps 4 through 7.
• Ability to identify applicable STIGs based on system authorization boundaries and components.
• Ability to decompose security controls/checks and ensure artifacts satisfy requirements.
• Understanding of MITRE ATT&CK techniques and tactics to determine risk and mitigations.
• Experience with eMASS, including control inheritance, TR Import, and POAM import functionality.
• Hands-on experience with cybersecurity tools and DoD networks.
• Experience in FISMA and other information assurance-related compliance reporting.
• Attention to detail, ability to multi-task, and self-assign work in a dynamic environment.
• Analytical, communication, and troubleshooting skills for proactive collaboration with virtual teams.
• Experience in cybersecurity assessment, vulnerability scanning, integration and testing, data analytics, or security operations.
• Knowledge of cybersecurity assessment and authorization (A&A) processes per DoDI 8500.01, DoDI 8551.01, RMF guides, and NIST instructions.
• Experience supporting formal Cybersecurity/IA testing and preparing System Security Plans.
• Strong verbal and written communication abilities, including business writing on complex topics.
• Understanding of security initiatives, monitoring, reporting, and compliance with regulations.
• Knowledge of Security Engineering and Architecture, Assessment and Authorization, Vulnerability Assessment, Incident Management, Vulnerability Management, Security Operations, and Policy/Program Development.
• Motivated self-starter with ability to lead and work in a matrix organization.

Preferred Qualifications

• Top Secret Clearance.
• Hands-on experience with Cloud Authorizations and NMCI authorizations.
• Experience with ITIL processes and/or ITIL Foundation V4 certification.
• Entrepreneurial spirit with a drive for innovation and improvement.
• Proven ability to coordinate between technical teams and business stakeholders.
• Willingness to perform shift work.

Pay

Pay Range: $87,100.00 - $157,450.00. The Leidos pay range is a general guideline and not a guarantee of compensation. Additional factors considered include responsibilities, education, experience, knowledge, skills, internal equity, market data, and applicable bargaining agreements.

Benefits

Leidos offers competitive compensation, Health and Wellness programs, Income Protection, Paid Leave, and Retirement. More details are available at www.leidos.com/careers/pay-benefits.