Information System Security Officer

The selected candidate will be responsible for the following:

Role Summary

Description

The Digital Sector at Leidos currently has an opening for an Information System Security Officer (MID) supporting the Homeland Enterprise Information Technology Secure Services and Support (HEITS) Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to support security accreditation and sustainment activities.

The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland.

The selected candidate will be responsible for the following

Provide support for security engineering, and the integration and deployment of security technology to support advanced external threat, insider threat, and cyber operations.

The contractor shall resolve concerns or issues related to UAM components within 48 hours and the Government's request should be acknowledged within 1 hour during normal business hours.

Perform weekly, or as directed by the government, vulnerability scans in support of FISMA requirements.

For all systems, coordinate with the respective system owner, system administrator or Information System Security Officer (ISSO) to notify them that weekly scanning is to be performed and that the scan results are to be forwarded to the ITP for analysis.

Support security assessments by working with the respective system owner, system administrator and/or Information System Security Officer (ISSO) to defining the scope, developing a test plan and rules of engagement document, obtaining necessary government approval, analyzing results, preparing a written report with the findings, impacts, and recommendations, and holding out briefings of findings.

Provide a quarterly status of the scan coverage and identify and report on issues with coverage to the government. Perform technical analysis of all scan results and prepare a written report of analysis for the government monthly, as needed, or at the request of the Government.

Conduct ITP directed vulnerability scans in support of operational matters (non-scheduled). Support ITP in the baseline compliance aspect of information systems and applications being accredited or reaccredited through the DHS's certification and accreditation process.

Review all ongoing Authority to Operate (ATO), Authority to Connect (ATC) and Interim Authorization to Test (IATT); and brief the status in the Weekly Activity Report. The ISSO shall ensure any open ATO's, IATT's, ATC, are documented in the Project Plan and IMS. Develop a schedule for the submission of Assessment & Authorization (A&A) packages for assessment. Government technical representatives may delay that time schedule depending on mission requirements. Maintain all Body of Evidence (BOE) documentation for which they are the prime author for the duration of the contract.

The contractor shall collaborate with the Government data center staff to include Government generated documentation in UAM system BOE.

The Contractor shall update the documentation to correspond with product updates released in response to software updates and patches. The Contractor shall document all changes to the security posture of the system and provide those documents to the government for review and approval.

Requirements

• Bachelors degree and (8)+ years of prior relevant experience or Masters with (6)+ years of prior relevant experience. Additional experience/education may be considered in lieu of a degree.
• Excellent written and oral communication skills
• Experienced and adept at developing and maintaining technical documents, analyses, and reports
• Experienced with preparing and presenting briefings to senior customer management, and customer stakeholders
• Ability to obtain DHS EOD SCI

Preferred Qualifications

• Master's degree from an accredited college or university in IT Management, Engineering, or related field
• Proven experience (6+ years) in Information Assurance Management
• Security+ or Similar Certification
• Extensive experience with the Risk Management Framework (RMF)
• Extensive experience with ICD-503
• Extensive experience developing security accreditation packages and achieving Authorities to Operate (ATOs)
• Experience supporting security accreditation activities within the Intelligence Community

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

About the Company

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Your greatest work is ahead!

We are looking for a Substation Protection & Controls Engineer to join our team. As a Career Protection & Control Engineer, candidates will have the opportunity to design substation protection and control projects for electric utilities at voltages from 12kV up to 500kV. This is an exciting and growing field in the power systems industry and allows candidates to get exposure to how the power generation such as that of renewable energy ties into the electric system. Candidates will be expected to use knowledge of digital logic design, AC and DC circuits to design substation electrical projects.

HYBRID SCHEDULE: Candidates must live in Framingham, MA office's client servicing territory. MA, CT, NH, RI. (1 - 4 days in office.)

Successful candidates can look forward to a fast paced, diverse work environment and flexible work hours/work arrangements as well as managers who will encourage career development and growth including:

In this role, you can also expect to gain experience in the following: