RMF Security Analyst

• Active DoD Secret clearance.\n
• Bachelor’s Degree in a related discipline as well as professional, directly relevant experience depending on job level (Level II: 2+ years of experience, Level III: 4+ years of experience). Additional years of professional and/or military experience may be substituted in lieu of degree.\n
• Must possess DoD 8140 (formerly 8570) IAT Level II certification (e.g., Security+) prior to start date.\n, * Experience with Cross Domain Solutions and Secret and Below Interoperability (SABI) framework, process and implementation\n
• Experience in performing risk assessment, IT audits, security planning, systems accreditation and policy development.\n
• Experience complying with USG, DoD, and DA regulations and preparing for responding to information security audits and questionnaires.\n
• Understanding of related information technology (e.g. firewalls, VPN, virtualization, DLP, etc) and physical security assets.\n
• Knowledge of domain structures, user authentication, data encryption, access audits and end-user security best practices.\n
• Experience with UNIX/LINUX OS and any scripting language.\n
• Experience working with IDS/IPS and processes.\n

Leidos has an upcoming opportunity for a cyber professional to join our team at Fort Meade in Maryland. This is a hybrid position based primarily on-site, with opportunity for 1-2 remote days per week depending on mission needs. \nOur recruiting team will contact applicants as positions become available - we expect to begin onboarding in late summer 2026.\n \n This position will support the implementation and administration of information security policies, procedures, and technologies to ensure the protection of systems, applications, and data on tactical and development networks.\n \n PRIMARY RESPONSIBILITIES:\n \n \n

• Support the Assessment and Authorization of DoD systems, software, and networks in accordance with the Risk Management Framework (RMF), utilizing the Enterprise Mission Assurance Support Service (eMASS) system.\n
• Provide professional security services for IA/Cybersecurity in accordance with US Government (USG), Department of Defense (DoD) and National Security Agency (NSA) policies and guidelines.\n
• Provide the necessary support to monitor and ensure compliance with information security policies, procedures and regulatory requirements including assistance with internal auditing, reporting, technical reviews, and identification of security risks.- Assist with drafting, reviewing, editing, and recommending guidance for Standard Operating Procedures (SOP), Tactics, Techniques, & Procedures (TTP), System Security Plans (SSP), Plan Of Action and Milestones (POA&M), and Federal Information Security Management Act (FISMA).\n
• Support the implementation and administration of information security policies, procedures, and technologies to ensure the protection of systems, applications, and data on tactical and development networks by working hand and hand with technical SMEs, systems administrators and engineers.\n

\n BASIC QUALIFICATIONS:\n \n \n