CompTIA Cybersecurity Analyst
Role details
Job location
Tech stack
Job description
Hardening Scheduling Operations Leadership Automation Checklists Market Data NIST 800-53 Data Analysis Cyber Security Detail Oriented Ancient History Network Security Secret Clearance Support Services Cyber Engineering Device Management Windows PowerShell Information Systems CompTIA Security+ CE IT Service Management System Administration Intelligence Analysis Vulnerability Scanning Cyber Security Policies IAT Level II Certification Information Systems Security Information Technology Operations Plan Of Action And Milestones (POA&M) Application Programming Interface (API), Leidos has a career opportunity for a Information Systems Security Engineer to support the Air Force National Capital Region IT Services program.
The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), Joint Chiefs of Staff, and other Air Force activities within the AFNCR, missions to include the Pentagon, Joint Base Andrews (JBA), Joint Base Anacostia-Bolling (JBAB), and other locations, leased spaces, and alternate sites. The major support areas required are IT Operations and Maintenance; Plans, Projects, and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail, resulting in a fast-paced, challenging, but also rewarding environment.
If this sounds like the kind of environment where you can thrive, keep reading!, The Leidos Digital Group is seeking a ISSE to support a high visible fast paced program. The ISSE will be responsible for assiting with scheduling and running vulnerability scans using Tenable SecurityCenter/Nessus (ACAS) in classified and unclassified environments. Review scan results to help identify potential CAT I/II/III findings, false positives, and basic configuration issues. Identifying hardening requirements that still need to be met and apply those Security Technical Implementations (STIGs).
Act as expert for system admins and Engineers to assit thorough the STIG hardening process.
Support tracking of remediation actions, Plans of Action and Milestones (POA&Ms), and exceptions in accordance with RMF guidance.
Follow established procedures to validate DISA STIG checklists and work with team members to ensure secure system configurations
PRIMARY RESPONSIBILITIES:
Help prepare basic vulnerability reports, compliance summaries, and metrics to support leadership briefings and inspection readiness (e.g., CCRI/CORA).
Assist in maintaining asset groupings, scan zones, and credentialed scanning configurations as directed by senior analysts.
Coordinate with Queue Managers, ISSOs, and Engineering teams to support the remediation of high-priority vulnerabilities.
Maintain data accuracy within ACAS, including proper tagging and grouping for consistent reporting., The Cyber Engineer will be a strategic asset and will be driven to automate network security compliance.
This expert will create a direct connection between our network security system and our device management software.
The engineer will integrate these systems to give us a single, real-time inventory of all devices that are connected to our network, even when they are off-site., All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws. Related Jobs Firewall Engineer Leidos Arlington, VAOn-Site Firewall Equities DevSecOps Operations Management Automation Market Data Consolidation Cyber Security Self-Motivation Working Capital Cloud Migration Service Catalog Virtual Routers Ancient History Customer Service Security Clearance Service Management Security Solutions Technology Roadmaps Networking Hardware Information Sharing GIAC Certifications Palo Alto Firewalls CompTIA Security+ CE Continuous Integration Continuous Development Web Application Security IAT Level II Certification Virtual Private Networks (VPN) Internet Protocol Security (IP SEC) CompTIA Cybersecurity Analyst (CySA+) Systems Security Certified Practitioner Information Technology Infrastructure Library GIAC Security Essentials Certification (GSEC) Counter Intelligence Polygraph (CI Clearance) GIAC Global Industrial Cyber Security Professional Cisco Certified Network Associate Security (CCNA Security) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0 Cybersecurity Engineer SME Leidos Bethesda, MDOn-Site Linux CI/CD Splunk Nessus Rapid7 Ansible Auditing Firewall Equities Scripting SonarQube DevSecOps Pipelines Operations Automation Purchasing Upskilling Market Data Coordinating Oracle Cloud Cryptography Investigation Cyber Security Key Management Risk Management Authentications Cloud Computing Ancient History Network Security Security Controls Incident Response CompTIA Security+ Digital Forensics System Monitoring Endpoint Security Cyber Engineering Analytical Method Windows PowerShell AWS CloudFormation Systems Engineering Amazon Web Services Time Off Management Security Engineering Software Development Contingency Planning Signals Intelligence Programming Languages Regulatory Frameworks Vulnerability Scanning Security Configuration Cyber Security Policies Configuration Management Vulnerability Management Certified Ethical Hacker Cyber Security Standards Cybersecurity Compliance Risk Management Framework Authorization (Computing) Cyber Threat Intelligence Cyber Security Assessment IT Security Documentation Agile Software Development Splunk Enterprise Security Google Cloud Platform (GCP) Computer Network Operations Change Management Processes Information Systems Security Customer Information Systems React.js (Javascript Library) Python (Programming Language) Enterprise Application Software Endpoint Detection And Response Troubleshooting (Problem Solving) Host Based Security System (HBSS) Intrusion Detection And Prevention CompTIA Cybersecurity Analyst (CySA+) Plan Of Action And Milestones (POA&M) Security Information And Event Management (SIEM) Certified Information Systems Security Professional Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0 Cyber Security Engineer-Technical Lead Leidos Bethesda, MD*On-Site Splunk Gitlab Github Ansible Auditing Firewall Equities Scripting DevSecOps Pipelines Operations Leadership Management Automation Mentorship Purchasing Upskilling SolarWinds Market Data Coordinating
Requirements
Active DoD Secret clearance required.
CompTIA Security+ CE or higher DoD 8570 IAT Level II certification must meet 8140 ISSM role qualification.
BS Degree and 4-8 years of cybersecurity or system administration experience, with at least 1 year of direct ACAS or Tenable experience. Additional education and experience may be considered in lieu of a degree.
Working knowledge of DISA STIGs, vulnerability risk levels, and POA&M remediation strategies.
Familiarity with NIST SP 800-53, RMF compliance, and Air Force cybersecurity policy (AFMAN 17-130).
Strong attention to detail, documentation skills, and the ability to interpret technical vulnerability data., Experience supporting USAF, DISA, or other DoD mission systems.
Familiarity with EvaluateSTIG, StigViewer, OpenSCAP, Nessus/ACAS,
Prior involvement in CCRI/CORA preparation or vulnerability remediation campaigns.
Ability to communicate risk-based recommendations to both technical and non-technical stakeholders.
Understanding of automation tools/scripts (e.g., PowerShell, Nessus APIs) to support scan or report optimization.
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares., Player Coach Proxy Servers Cyber Security Key Management Security Tools Attack Vectors Detail Oriented Problem Solving Cloud Computing Ancient History Database Systems Network Security Security Controls Incident Response Digital Forensics Endpoint Security Cyber Engineering Analytical Method Windows PowerShell AWS CloudFormation Medical Monitoring Amazon Web Services Time Off Management Security Engineering Technical Leadership Data Loss Prevention Signals Intelligence Programming Languages Technical Engineering Vulnerability Scanning Text Retrieval Systems Red Hat Enterprise Linux Cyber Threat Intelligence Agile Software Development Computer Network Operations Change Management Processes Customer Information Systems React.js (Javascript Library) Python (Programming Language) Virtual Private Networks (VPN) Enterprise Application Software Troubleshooting (Problem Solving) Host Based Security System (HBSS) Security Information And Event Management (SIEM)
Benefits & conditions
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .