Description

Job Description:

The Information Assurance Security Engineer is a member of the Leidos ASC information Security (InfoSec) team responsible for applying cybersecurity principles and best practices to proactively protect and maintain the confidentiality, integrity, and availability, of the United States Antarctic Program (USAP) data, information systems, and enterprise network. Personnel in this position have an elevated level of trust, with access to sensitive and private information which must be handled with integrity and respect in accordance with USAP policies and procedures.

The position will provide continuous security monitoring of the USAP IT infrastructure while working directly with IT Operations teams to ensure the secure operation of IT infrastructure; and with project management and architecture teams to provide information security requirements, design inputs and assessing security risks associated with new services. As a member of the InfoSec engineering team, the Security Engineer acts as a technical consultant for the compliance analyst team.

The successful candidate must possess a solid technical background in some or all of the following: securing Windows and Linux Operating systems, Cisco network devices, and Palo Alto firewalls, be capable of developing, analyzing, and implementing Security Technical Implementation Guides (STIGs). In addition, the candidate must be familiar with providing continuous security monitoring activities, and managing in-depth vulnerability scans, remediation, risk analysis, and development of Plans of Action & Milestones (POA&M).

Required Qualifications:

• Bachelor’s degree (preferably in a technology related field) with 4 years in an information security role. Eight years of commensurate experience with relevant certifications accepted in lieu of degree.

• Proficient in applying secure design, implementation, and continuous monitoring to an enterprise IT Infrastructure (Network Devices, Systems, Applications, Services, LAN/WAN topologies, and protocols).

• Proficient in the secure implementation and administration of Windows and/or Linux operating systems and applications in an enterprise environment.

• Proficient in the phases of security incident response (Prepare, Detect, Analyze, Contain, Eradicate, and Recover).

• Proficient in developing, implementing, and validating baseline security configurations and policies (e.g., DISA, CIS Benchmarks).

• Knowledge and practical application of FISMA Compliance, and NIST Risk Management Framework, tools, technologies, and methods (e.g., NIST SP 800-30, 800-37, 900-39, 800-53, etc,).

Required Skills and Certifications:

• Current security certification(s) (e.g., CISSP (preferred), Security+, CASP, CEH, Certified Incident handler).

• Current general IT certification(s) (e.g., MCSE, RHCE, CCNA, CCNP, Network +, Linux +).

• Experience in managing Continuous Security Monitoring (CSM) tools / Security Incident and Event Management (SIEM) systems such as Splunk (preferred), LogRhythm or Exabeam.

• Experience administering vulnerability scanning tools such as Tenable Nessus and Burps Suite.

• Fundamental understanding of administering patch management tools such as Microsoft Endpoint Configuration Manager (MECM)

• Experience working within project management methodologies (e.g., Traditional, Agile, Scrum, Kanban, etc.)

• Experience capturing and performing packet level analysis of network traffic.

• Fundamental understanding of deploying and managing Public Key Infrastructure (PKI)

This position requires the ability to obtain and maintain a Public Trust security clearance.

Must be a US citizen or permanent residency.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

#Remote