Leidos is hiring: Information Systems Security Engineer (ISSE) SME in bethesda

Responsibilities: Apply security engineering principles across system design, lifecycle, authentication/authorization, cryptography, intrusion detection, contingency planning, auditing, configuration management, and change control Conduct or support technical cybersecurity assessments and security audits Coordinate with cybersecurity personnel to recommend risk mitigations Identify vulnerabilities and non-compliance with cybersecurity standards and regulatory requirements Perform vulnerability scans with approved tools and report remediation progress Collaborate with DevSecOps teams to review scan results and remediate findings Install, configure, and maintain security scanning/monitoring tools integrated in system environments and pipelines Support RMF authorization by reviewing documentation and providing risk-based recommendations during ATO activities while tracking POA&Ms

Key requirements: MS degree and 15+ years of relevant experience; additional years may substitute for degree Active TS/SCI with Polygraph Experience performing vulnerability scanning and reporting to technical teams Experience reviewing threat intel and vulnerability advisories Experience monitoring systems with SIEM tools Incident investigation and response experience Experience tracking CVEs and mapping to controls Auditing systems for secure configuration baselines and policies Experience using at least two vulnerability scanning tools (e.g., AWS Inspector, Tenable, Rapid7 Nexpose, SonarQube, Fortify, OWASP tools) At least one certification: CISSP, Splunk, Network+, Security+, OSCP, CEH, CASP+, ISSEP Collaborative teamwork Effective communication Problem-solving mindset Vulnerability scanning Security monitoring RMF/ATO processes