Cybersecurity Specialist

Leidos is seeking a detail-oriented Cyber Security Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization’s Risk Management Framework (RMF) processes.

• Lead and support the security accreditation process for information systems.
• Develop, maintain, and review security authorization packages.
• Conduct security control assessments in accordance with RMF and applicable security standards.
• Collaborate with system owners, engineers, and stakeholders to implement security controls.
• Perform security risk assessments and recommend mitigation strategies.
• Monitor systems for compliance with cybersecurity policies and standards.
• Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities.
• Support continuous monitoring activities, including vulnerability management and security reporting.
• Prepare documentation for Assessment & Authorization (A&A) activities.
• Participate in internal and external cybersecurity audits.
• Stay current on cybersecurity threats, regulatory requirements, and best practices.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 3-7 years of experience in cybersecurity, information assurance, or security compliance.
• Experience implementing or supporting the NIST Risk Management Framework (RMF).
• Knowledge of:
• NIST SP 800-37
• NIST SP 800-53
• NIST SP 800-171
• FISMA
• FedRAMP (preferred)
• Experience with vulnerability assessment tools such as Tenable, Nessus, or ACAS.
• Strong understanding of security controls, risk assessment, and compliance documentation.
• Excellent written and verbal communication skills.
• Excellent communication skills both written and oral.
• At least one of the following Information Security Certifications:
• CISSP
• CISM
• Security+
• CAP (Certified Authorization Professional)
• CGRC (Certified in Governance, Risk and Compliance)
• CEH

• Ability to obtain a Secret level Security Clearance.

• Active Secret clearance
• Familiarity with cloud security (AWS, Azure, or Google Cloud).
• Experience supporting continuous monitoring programs
• Risk Management Framework (RMF) knowledge/experience
• Security Accreditation & Authorization (A&A) knowledge/experience
• NIST Cybersecurity Framework knowledge/experience
• Vulnerability Management knowledge/experience
• Security Compliance knowledge/experience
• Risk Assessment knowledge/experience
• Incident Response fundamentals knowledge/experience
• Security Documentation knowledge/experience
• Microsoft Windows & Linux administration knowledge/experience