The Decision Advantage within Defense at Leidos has an opening for a highly qualified Secret cleared Information System Security Officer. This is an exciting opportunity to bring your experience to support all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systems to realize the Department of Defense Joint All-Domain Command and Control (JADC2). In this role you will support the Advanced Battle Management System (ABMS) Digital Infrastructure (DI) Processing Node (PN) team to design and implement solutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter. ABMS is a top modernization priority for the Department of the Air Force and will be the backbone of a network-centric approach to battle management in partnership with all the services across JADC2. This position will work closely with Program Managers, domain engineers, and Government counterparts across Government and Industry partners.  

Primary responsibilities:

• Implement and enforce DoD, NIST, CNSS, and organizational cybersecurity policies, procedures, and standards.

• Support the development, review, and maintenance of system security documentation (SSPs, POA&Ms, Security Assessment Reports, Continuous Monitoring Plans) within eMASS.

• Conduct vulnerability assessments and assist in remediation of findings (e.g., STIGs, ACAS, Nessus).

• Assist in preparing and submitting systems for Authorization to Operate (ATO) under the Risk Management Framework (RMF).

• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find workarounds for communication protocols that are not interoperable).

• Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

• Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.

• Analyze design constraints, trade-offs and detailed system and security design, and consider lifecycle support.

• Stay current on emerging threats, vulnerabilities, and compliance requirements.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field. Additional years of experience will be considered in lieu of degree.

• Must be U.S. Citizen

• Must possess an active and current Secret clearance.

• 5+ years of experience in cybersecurity, with at least 2–3 years specifically as an ISSO or similar security role.

• Working knowledge of:

  • DoD RMF process and NIST SP 800-53 controls

  • Security Technical Implementation Guides (STIGs)

  • Vulnerability management tools (ACAS, Nessus, HBSS, Splunk, etc.)

• Monitor and evaluate system compliance with information technology (IT) security, resilience, and dependability requirements.

• Experience supporting and developing required artifacts for the ATO/authorization processes within the DoD environment.

• 2+ years of documented experience cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

• DoD 8570/8140 IAT Level II or IAM Level I baseline certification (e.g., Security+ CE, CAP, CISM, CISSP).

Additional Qualifications/Certifications

• TS/SCI clearance

• Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS). 

• Experience with government cloud security environments ( GovCloud, Azure Government, Commercial Cloud Environment (C2E), Secret Commercial Cloud Environment (SC2E).

• 2+ years of documented experience on information technology (IT) supply chain security and risk management policies, requirements, and procedures.

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.