Vulnerability Assessment Analyst

Title: Vulnerability Assessment Analyst

Location: Must be local to Richardson, TX and Greenville, TX

Clearance: Secret with ability to obtain and maintain TS/SCI.

The Decision Advantage Business Area within Defense at Leidos has an opening for a highly qualified Secret cleared Vulnerability Assessment Analyst. This is an exciting opportunity to bring your experience to support all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systems to realize the Department of Defense Joint All-Domain Command and Control (JADC2). In this role you will support the Advanced Battle Management System (ABMS) Digital Infrastructure (DI) Processing Node (PN) team to design and implement solutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter. ABMS is a top modernization priority for the Department of the Air Force and will be the backbone of a network-centric approach to battle management in partnership with all the services across JADC2. This position will work closely with Program Managers, domain engineers, and Government counterparts across Government and Industry partners.

Primary responsibilities:

• Support the integration of security solutions by helping to document and implement configuration settings and requirements.

• Contribute to ensuring security changes are technically sound and comply with RMF, DoD, and NIST standards.

• Help identify and address gaps in cyber tools and processes and assist with the implementation of new solutions.

• Learn and apply DISA STIGs by assisting with their implementation and verification on various systems.

• Contributes to security monitoring and incident response using SIEM technologies.

• Collaborate with team members to communicate and document security configurations and requirements.

• Maintain familiarity with software development product lines.

Required Qualifications:

• BS degree and 8 - 12 years of prior relevant experience. Additional years of relevant experience will be considered in lieu of degree.

• Must be local to Richardson, TX and Greenville, TX

• Must have a active and current Secret Clearance with ability to obtain and maintain TS/SCI.

• Security Expertise:

  • Required DoD 8140 IAT Level II compliant certification such as CompTIA Security+

• Technical Proficiency:

  • Over two years of experience in systems, OS security or network security.

  • Proficient in Tenable Nessus, Nessus Manager, and Tenable.sc, or other vulnerability scanning and management.

  • Operating Systems & Automation:

  • Basic hands-on experience with command-line interfaces on various operating systems, including Linux and Windows.

  • Understands basic command in using Bash and PowerShell for scripting and automation.

• Compliance & Risk Management:

  • Basic working knowledge of DISA STIGs, including the ability to apply, verify, and document compliance.

  • Understands the basics of Risk Management Framework (RMF) process, including the creation of technical artifacts.

  • Problem-Solving & Collaboration:

  • Demonstrated analytical skills for troubleshooting security and connectivity issues.

  • A proven collaborator with excellent communication skills, able to work effectively with cross-functional teams.

Additional Qualifications/Certifications

• Familiarity with other vulnerability scanning or security tools (e.g., Anchore, OpenSCAP, Syft, Grype, PowerSTIG, Evaluate-STIG, STIGviewer).

• Experience with scripting or automation to enhance scanning and reporting processes.

• Experience with specific operating systems (Windows, Linux) and network device configurations and navigating and interacting via command line.

• Knowledge of containerization platforms like Docker and container orchestration tools such as Kubernetes, OpenShift, or similar.

• Other relevant cybersecurity certifications like SSCP, CCSP, CEH, PenTest+, Cloud+, GIAC, GCED, GCIH or CySA+ are a plus.

• TS/SCI clearance

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.