Information Systems Security Engineer (ISSE)

The AEGIS program at Leidos is seeking an experienced Information Systems Security Engineer (ISSE) to support the security and protection of NASA Advanced Supercomputing (NAS) systems and High Performance Computing (HPC) environments. The ISSE will support the development, documentation, implementation, enhancement, operation, and maintenance of comprehensive System Security Plans (SSPs) across NAS systems, clusters, interconnects, storage platforms, and data resources. This role will help ensure security documentation, configuration baselines, security checklists, and system hardening guidelines align with applicable security requirements while addressing the unique performance, throughput, and operational demands of HPC environments.

PRIMARY RESPONSIBILITIES:

• Ensure that the SSP and related artifacts comply with NASA and U.S. Government security requirements, including NPR 2810.1F, NIST 800-53/53B, FISMA, and the NIST HPC Security Overlay guidance.
• Provide expert technical consultation for internal and external stakeholders on HPC-specific security issues, including system hardening for MPI-based workloads, GPU/accelerator nodes, high-speed fabrics (InfiniBand, Slingshot), and performance-critical parallel filesystems.
• Identify solutions that balance high-performance computing usability with robust security ensuring that protective measures do not inhibit large-scale simulation workflows, mission operations, or research productivity.
• Provide regular HPC-specific data analytics and reporting - including vulnerability summaries, risk evaluations, security telemetry, and compliance findings - to Division and Branch leadership.
• Support Plan of Action and Milestones (POA&M) development, tracking, updating, and remediation for all HPC systems. Coordinate POA&M resolution activities across HPC systems engineering, networking, storage, and operations teams.
• Conduct targeted compliance assessments for large-scale HPC environments and report findings to NAS leadership. Assessments may include HPCc-cspecific topics such as high-speed interconnect configurations, MPI-node exposure risks, GPU driver-level vulnerabilities, and specialized HPC authentication/authorization workflows.
• Coordinate with other subtasks to implement, enforce, and maintain compliance with Government cybersecurity policies, including - but not limited to - NPR 2810.1F, NIST 800-53/800-53B, NIST SP 800-234 (HPC Security Overlay), DHS directives, FIPS standards, OMB guidance, and FISMA requirements.
• Coordinate participation in NASA Assessment & Authorization (A&A) activities for large-scale HPC systems, including data calls, technical evaluations, security control inheritance definitions, and documentation updates.
• Conduct credentialed and performance-aware vulnerability scans across HPC assets, ensuring scanning methods accommodate specialized hardware (GPU nodes, high-speed fabrics, parallel filesystems) without degrading mission workloads. Report results to NAS leadership and Information System Security Officials (ISSOs).
• Report potential or actual HPC security incidents to the appropriate NAS or Agency personnel. Support investigations in partnership with NASA SOC, Incident Response Teams, and NAS Management.
• Support Root Cause Analysis (RCA) investigations and remediation actions related to HPC security issues - especially those involving system performance anomalies, distributed job failures, and parallel-environment attack surfaces.
• Assist in the development of policies, procedures, and guidelines ensuring that HPC computational, storage, networking, and data-analysis systems comply with all applicable NASA and government security requirements.
• Maintain expertise in HPC security by monitoring NASA, NIST, DOE, and industry HPC security advisories. Communicate emerging HPC-specific threats - such as accelerator-specific vulnerabilities, MPI/RDMA protocol risks, and job-scheduler exploitation vectors - to facility staff.
• Coordinate security compliance activities related to Section 508, Supply Chain Risk Management (SCRM), IPv6 adoption, and cybersecurity reviews for all HPC IT acquisitions, including compute clusters, interconnects, accelerators, and data-storage hardware.
• Supports vulnerability assessment and design of intrusion detection tools for complex network architecture.

BASIC QUALIFICATIONS:

• Bachelor's degree and 8 years of prior relevant experience.
• Experience managing project work.
• Possess in-depth technical knowledge of Cybersecurity principles.
• Ability to delegate and track multiple projects at the same time.
• Ability to develop, motivate, and effectively manage the workforce.
• Strong work ethic and willingness to work as a team.

CLEARANCE REQUIREMENTS:

• U.S. Citizenship is required.
• Must have the ability to obtain and maintain a security clearance ranging from a Public Trust, at minimum, up to a Top Secret clearance, as required.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.