Cyber Security/InfoSec Engineer (SME)

Description

Job Description:

Leidos is looking for a Cyber Security Engineer to target, assess, exploit, and report risks and vulnerabilities of information systems to provide senior decision makers with actionable data. Cyber Security Engineers are responsible for IT security/vulnerability assessments and managing overall network security using network and security-related hardware and software.

Primary Responsibilities

• Identify and define applicable security controls and responses for the project
• Review responses, enter responses into the cyber risk management platform, and update risks
• Identify common controls and draft common control language for the cyber risk management platform
• Perform security maintenance duties, such as performing analyses of vulnerabilities and providing recommended resolutions
• Maintain awareness of system level changes, ensure proper patch levels, and upload cyclic scans to the appropriate repositories
• Achieve and maintain system accreditation, including providing guidance, plans, and evidence and maintaining documentation
• Perform regular reviews, such as audits, and review security test results
• Participate in or lead technical exchange meetings and application review boards and document action items and results
• Brief management on status

Basic Qualifications

• Typically requires BS degree and 12-15 years of prior relevant experience or Masters with 10-13 years of prior relevant experience
• Demonstrated work experience in cyber security or related IT field
• Demonstrated experience performing complex technical tasks with minimal direction

Preferred Qualifications

• BS in Mechanical Engineering, Electrical Engineering, or Computer Sciences

• Demonstrated experience designing, testing, or implementing IT security architecture
• Demonstrated experience performing network security analysis
• Demonstrated experience developing risk management methodologies
• Demonstrated experience analyzing test results to develop risk/threat mitigation plans

• Demonstrated experience communicating vulnerability results and risk posture to senior executives
• Certified Information Systems Security Professional (CISSP)

IND

Pay Range: