Information System Security Officer

Description

Job Description:

Leidos has an immediate opening for a junior Information System Security Officer at Goodfellow Air Force Base, TX. The ISSO will support the Information System Security Managers (ISSM) and mid-level ISSO in the execution of 17 TRG cybersecurity programs, participating in the integration (planning, testing, implementation, & securing) of current and future training systems in accordance with AFI 17-130 Cybersecurity Program Management, the entire DoDI 8500 series, and the full series of NIST 800 Special Publications. Responsibilities will include:

• Advise the ISSMs on risk levels and security posture.

• Maintain awareness of Authorizing Official directed changes affecting the organization's cybersecurity posture.

• Collect and maintain artifacts needed to meet system cybersecurity reporting.

• Ensure that information system changes are evaluated and implemented as required

• Coordinate cybersecurity inspections, tests, and reviews

• Ensure that new and revised security requirements are integrated into continuity plans.

• Evaluate development efforts to ensure that baseline security safeguards are appropriately installed.

• Identify information technology (IT) security program implications of new technologies or technology upgrades.

• Manage the monitoring of information security data sources to maintain organizational situational awareness.

• Execute the privileged account access review and authorization program.

• Accomplish information security risk assessments.

• Provide inputs for the development and/or modification of cybersecurity policies and procedures.

• Recognize security violations and implement the incident response plan.

• Open trouble tickets when a vulnerability is discovered.

• Weekly, and as directed by an ISSM, review audit logs and communicate items of concern to the appropriate ISSM(s).

• Communicate security issues from the change management process to relevant personnel. 

• Identify security requirements specific to an information technology (IT) system in all phases of the system life cycle.

• Generate plans of actions and milestones, and ensure remediation plans are valid and executable for deficiencies identified during risk assessments, audits, inspections, etc.

• Review trouble tickets and close tickets after validating appropriate fix actions have been completed.  Ensure ongoing tickets are assigned to appropriate personnel.

• Authorize standard user accounts following appropriate guidance.

• Review DISA Intelligence Community Vulnerability Management (ICVM) updates.  Download and update Assured Compliance and Assessment Solution (ACAS) feeds and plugins, when required.  Generate reports and open trouble tickets for new findings.

• Monthly, and as directed by an ISSM, perform hardware and software inventory scans and upload findings to appropriate sharepoint or file share, per the SOPs.

• Perform security control assessments, and generate and upload artifacts into eMASS and Xacta, under ISSM direction.

Required

• 2-4 years’ experience as an ISSO/Alt ISSM

• Bachelor's Degree in Cybersecurity or related field (experience may be substituted in lieu of degree).

• IAT Level II/IAM level I

• Ability to obtain TS/SCI clearance.

Desired

• Current TS/SCI clearance

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is a Fortune 500® technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 47,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $14.4 billion for the fiscal year ended December 30, 2022.   For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.