Join a team committed to a mission!
At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.
Are you ready for your next career challenge?
The Defense Group at Leidos currently has an opening for an Information System Security Officer (ISSO) to work in our Chesapeake, VA location within an established Information Assurance (IA) team under the direction of the Information System Security Manager (ISSM).
Are you ready to unleash your potential?
Leidos Defense Group provides a diverse portfolio of systems, solutions, and services covering land, sea, air, space, and cyberspace for customers worldwide. Solutions for Defense include enterprise and mission IT, large-scale intelligence systems, command and control, geospatial and data analytics, cybersecurity, logistics, training, and intelligence analysis and operations support. Our team is solving the world’s toughest security challenges for customers with “can’t fail” missions. To explore and learn more, click here!
Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today!
Responsibilities – Work you’ll do:
- Establish and implement security procedures and practices in support of Customer goals and current DoD\DCSA regulations.
- Develop and update assessment and authorization documentation (Body of Evidence) for management and continuous monitoring of information systems.
- Using knowledge of the Information System (IS) and understanding of established Information Assurance requirements validate security policies and procedures outlined in the System Security Plan (SSP), customer policies & regulations, and ensure local policies are followed.
- Take corrective action to resolve problems identified and ensure systems are operated, maintained, and disposed of in accordance with established policies and procedures.
- Perform security audits IAW established procedures. Develop process for the management, review, and retention of security audit data. Make decisions and implement corrective action as required to resolve audit discrepancies.
- Author and review IS security-related documentation.
- As a IA Subject Matter Expert (SME) provide critical thinking to ensure system security requirements are addressed during all phases of the System Development Life Cycle (SDLC).
- Establish system specific recovery processes to ensure security features and procedures are properly protected and restored.
- Conduct ongoing security reviews and tests of systems to verify security features and controls are functional and effective. Take corrective action to resolve identified vulnerabilities.
- Provide security engineering review of proposed changes or additions to the IS (including hardware, software, or connectivity), and advise the ISSM of the security relevance.
Required Experience, Skills, and Education:
- Bachelor's degree in Information Security, Information Systems, or related discipline and 4+ years of direct experience; or Masters degree and 2+ years of experience. Additional relevant/specialized training and experience may be substituted in lieu of degree.
- Possess a current DoD 8570.01 compliant certification for IAM Level I, e.g. Security + w/CE, or the ability to obtain within 6 months of employment.
- Experience with DoD implementation of the Risk Management Framework (RMF) and governing directives (NIST, CNSS, DCSA, etc.).
- The qualified candidate shall have excellent customer service skills and the ability to work independently, prioritize, schedule, and complete multiple tasks along with extensive knowledge and experience in specialized area of expertise to include Department of Defense (DOD), clients, program customers, and program sponsors Security staff.
Preferred Experience, Skills, and Education – Favorable if you have:
- Comprehensive knowledge of DCSA Assessment and Authorization Process Manual (DAAPM), NISPOM CFR Part 32 117.18 Information Security and NIST 800-53 security controls.
- Knowledge of the Unites States Navy Risk Management Process Guide (RPG)
- Experience conducting security audits of information systems.
- Extensive training or experience with Windows based Information Systems standards with a working knowledge of LINUX & Solaris operating systems.
- Current Certified Information System Security Professional (CISSP) certification
- Vulnerability assessment and analysis experience utilizing SCAP, ACAS/NESSUS and DISA STIGs
- Candidates must have a DoD Secret Security Clearance.