2 days ago
Base Salary
$108k - $195k/yr
Responsibilities
- Shepherd cybersecurity engineering from initial requirements and architecture through design, implementation, integration, assessment, qualification, production, fielding, and sustainment.
- Identify cybersecurity requirements from DoD policies, NIST publications, DFARS, CMMC, RMF controls, STIGs, program protection requirements, SCRM, and customer requirements.
- Establish security boundaries, trust boundaries, information flows, interfaces, assumptions, and constraints with Systems Engineering.
- Participate in system and software architecture development and design reviews, evaluate weaknesses, and recommend risk-reduction measures.
- Provide guidance on authentication, authorization, least privilege, encryption, key management, logging, auditing, secure communications, interface protection, network segmentation, and data protection.
- Perform or coordinate vulnerability assessments using ACAS/Nessus, SCAP/STIG tools, SAST/SCA platforms, network analysis tools, and other approved capabilities.
- Develop remediation recommendations with engineering teams and maintain RMF artifacts, inventories, diagrams, vulnerability records, and POA&Ms.
- Support IATT, ATO, Assess-Only, and other system authorization and assessment approaches.
Requirements
- Bachelor’s degree in cybersecurity, computer science, computer engineering, software engineering, systems engineering, electrical engineering, information technology, or a related technical discipline.
- Eight years of cybersecurity engineering experience; alternatively, a combination of education, military experience, and directly applicable engineering experience plus 11 years may be considered.
- Experience supporting cybersecurity for software-intensive or defense systems from development through test, production, and fielding is strongly preferred.
- Strong understanding of secure system and software engineering principles, secure software architecture, secure coding, Linux security, and system hardening.
- Working knowledge of NIST SP 800-53, NIST SP 800-37 RMF, NIST SP 800-171, NIST SP 800-218 SSDF, and applicable DoD cybersecurity requirements.
- Experience developing cybersecurity requirements and verification criteria, conducting risk assessments, and managing vulnerabilities.
- Familiarity with ACAS, Nessus, SCAP/STIG tools, SAST, DAST, SCA, dependency scanning, secrets scanning, and software supply-chain security.
- Security+ or CISSP certification.
- U.S. citizenship and ability to obtain and maintain an active Secret clearance.
- Must reside in Huntsville, Alabama, or be willing to relocate there; strong communication, documentation, collaboration, and continuous-learning skills are preferred.
Benefits
- Work is based in the Leidos office in Huntsville, Alabama, with relocation to the Huntsville area required if necessary.
About Leidos
Leidos builds and operates technology and engineering solutions for defense, intelligence, civil, and health agencies, including systems integration, cyber, enterprise IT, sensors, and healthcare IT. It primarily sells through government contracts and long-term programs, plus managed services and mission software. Founded in 1969 and headquartered in Reston, Virginia, Leidos is a Fortune 500 public company on the NYSE; customers include U.S. defense and intelligence agencies and civil bodies such as the FAA.