Description
Job Description:
The Defense Group at Leidos as an exciting opportunity as a Software Assurance (SwA) Analyst on our GSM-O II IDIQ contract’s Joint Service Provider (JSP) Cyber Security Task Order in Alexandria, VA. JSP provides a full range of IT products, services, and solutions and customer services to the Office of the Secretary of Defense (OSD), Chairman of the Joint Chiefs of Staff (CJCS) and the Joint Staff (JS), Director of Administration (DA), Pentagon Force Protection Agency (PFPA), Washington Headquarters Services (WHS), and other OSD offices for them to meet mission and business requirements. Through the JSP Cyber Security program, JSP performs a wide variety of services and functions required to secure the information security posture for DoD services.
This role will be based onsite in Arlington, VA and an active Secret security clearance is required prior to start.
Primary Responsibilities:
Provide the government with a level of confidence that software functions as intended and is free of vulnerabilities, either intentionally or unintentionally designed or inserted as part of the software, throughout the Software Development Life Cycle (SDLC)
Ensure security is addressed holistically and systematically throughout the SDLC
Provide best-in-class techniques, tools and education to support and increase software security within the Joint Base Pentagon
Perform static code analysis, dynamic code analysis, spidering, software penetration testing, database vulnerability assessment, web service testing, mobile application testing, web and mobile discovery scanning, fuzzing, and reverse engineering of software.
Develop and maintain SwA processes and practices to discover and diagnose software throughout the SDLC
Analyze the relationships between components and identifying flaws at the architectural level.
Participate in mission meetings required to document the customer requirements and produce a Software Assurance Plan (SwAP)
Leverage the Common Weakness Scoring System (CWSS) to score software discovered vulnerabilities
Conduct code scans in support of requests for addition of software to the Supported Products List (SPL) and in support of code changes to new or existing applications.
Validate controls are properly implemented as part of the corresponding Risk Management Framework (RMF) package in Enterprise Mission Assurance Support Service (eMASS).
Basic Qualifications:
Bachelor's degree in Science or Engineering Discipline and 4+ years of experience is required. Additional experience may be considered in lieu of degree.
DoD 8570 IAT Level II certification.
Active Secret security clearance or higher is required prior to start. Program can support up to TS/SCI.
BURP suite/Checkmarx Training Certification.
Demonstrates successful track record for delivering large/complex projects on time and within budget within DoD Organizations
Demonstrates expert level experience with the planning, coordinating, scheduling, resourcing, tracking, documenting, executing and analyzing audits and inspections within an organization.
Demonstrates experience with applying compliance standards to large and complex IT environments.
Demonstrates ability to evaluate the design and effectiveness of controls and standards to ensure compliancy in accordance with the applicable audits and inspections for an organization.
Demonstrates expert level understanding of vulnerabilities/weaknesses across complex IT environments and ability to understand applicability of security standards across technologies.
Demonstrates experience with communicating and coordinating at a functional and senior government.
Demonstrates experience with data analysis and developing work products to enable government risk based decisions.
Pay Range:
Covid Guidance
In order to enter Leidos facilities in the U.S. and to attend Leidos events outside our facilities, employees are required to be vaccinated for COVID-19 or maintain proof of a negative COVID-19 test within 96 hours of entry. In addition, we are receiving guidance from certain customers that onsite contractor personnel will need to be fully vaccinated to access customer facilities. If you are not vaccinated, please consider getting your COVID-19 vaccination as soon as possible. If you have any questions, please contact your Talent Acquisition POC.
About Leidos
Leidos is a Fortune 500® technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 43,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $13.7 billion for the fiscal year ended December 31, 2021. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.
Securing Your Data
Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [email protected].
Commitment to Diversity
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
