Systems Security Analyst

Leidos is seeking an experienced Systems Security Analyst to support an Air Force Cybersecurity Service Provider (CSSP) mission.

The Systems Security Analyst will assess system security controls and cybersecurity posture, identify and mitigate security deficiencies, support implementation of security requirements, and provide cybersecurity recommendations to Government and technical stakeholders.

The successful candidate will apply cybersecurity, information assurance, and risk-management principles to evaluate system security, support remediation, maintain security documentation, and ensure appropriate security controls are implemented and operating effectively.

Primary Responsibilities

• Assess the effectiveness of system security controls.
• Apply security policies to meet system security objectives.
• Assess configuration management, change management, and release-management processes for security impact and compliance.
• Develop procedures and support testing of system failover and transfer of operations to alternate sites based on system availability requirements.
• Analyze and report organizational cybersecurity-posture trends.
• Analyze and report system cybersecurity-posture trends.
• Ensure system security operations and maintenance activities are properly documented and updated as required.
• Evaluate cybersecurity-enabled products and compensating security controls to determine whether identified risk has been reduced to an acceptable level.
• Assess access controls based on principles of least privilege and need-to-know.
• Implement security measures to resolve vulnerabilities, mitigate risk, and recommend security changes to systems or system components as required.
• Implement system security measures in accordance with established procedures to support confidentiality, integrity, availability, authentication, and non-repudiation requirements.
• Mitigate or correct security deficiencies identified during security or certification testing and recommend risk acceptance when appropriate for consideration by the authorized Government representative.
• Verify minimum security requirements are implemented for applications and systems.
• Plan and recommend system modifications or security adjustments based on exercise results or changes to the operating environment.
• Maintain documentation of system security implementation, operations, and maintenance activities.
• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
• Verify and update cybersecurity documentation to accurately reflect application and system security-design features.
• Conduct research and analysis to support cybersecurity performance improvement and mission objectives.
• Work independently and collaboratively with project, technical, cybersecurity, and Government stakeholders.
• Perform other duties as assigned.

Basic Qualifications

• Bachelor’s degree in Cybersecurity or a related field.
• 3+ years of relevant cybersecurity experience.
• Current Top Secret/SCI security clearance with ability to obtain additional or higher read-ins as required.
• Must meet DoD 8140 / Defense Cyber Workforce Framework (DCWF) Work Role 511 - Cyber Defense Analyst qualification requirements / IAT Level II certification.
• Knowledge of encryption technologies and algorithms, including:
  • Internet Protocol Security (IPsec)
  • Advanced Encryption Standard (AES)
  • Generic Routing Encapsulation (GRE)
  • Internet Key Exchange (IKE)
  • Message Digest Algorithm (MD5)
  • Secure Hash Algorithm (SHA)
  • Triple Data Encryption Standard (3DES)
• Knowledge of cybersecurity principles and organizational requirements related to confidentiality, integrity, availability, authentication, and non-repudiation.
• Knowledge of IT security principles and methods, including firewalls, demilitarized zones, and encryption.
• Knowledge of network access, identity, and access-management concepts, including Public Key Infrastructure (PKI).
• Knowledge of operating systems.
• Knowledge of network traffic and communications, including TCP/IP, the OSI model, and Information Technology Infrastructure Library (ITIL) concepts.
• Knowledge of how system components are installed, integrated, and optimized.
• Knowledge of various computer architectures.
• Knowledge of network-design processes, including security objectives, operational objectives, and associated tradeoffs.
• Knowledge of network-analysis tools used to identify vulnerabilities.
• Skill in designing integration of hardware and software solutions.
• Ability to determine how a security system should operate, including resilience and dependability requirements, and assess how changes in conditions, operations, or the environment may affect system-security outcomes.
• Skill in developing and applying security-system access controls.
• Skill in evaluating the adequacy of security designs.
• Skill in assessing security-system designs.
• Skill in assessing security controls based on cybersecurity principles and requirements.

Preferred Qualifications

• CSSP Infrastructure Support certification.
• Experience performing ISSO or ISSM functions.
• Experience with Cyber Network Defense and Analysis.
• Experience with IT security engineering.
• Experience with cloud-security engineering.
• Agile training or experience.

ENAMOR

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.