nCyber Security Service Provider (CSSP) Analyst

The Digital Sector at Leidos has an exciting opportunity as a \nCyber Security Service Provider (CSSP) Analyst / Site Assistance Visits (SAV) Analyston our GSM-O II IDIQ contract’s Joint Service Provider (JSP) Cyber Security Task Order in Alexandria, VA. JSP provides a full range of IT products, services, and solutions and customer services to the Office of the Secretary of Defense (OSD), Chairman of the Joint Chiefs of Staff (CJCS) and the Joint Staff (JS), Director of Administration (DA), Pentagon Force Protection Agency (PFPA), Washington Headquarters Services (WHS), and other OSD offices for them to meet mission and business requirements. Through the JSP Cyber Security program, JSP performs a wide variety of services and functions required to secure the information security posture for DoD services. \n \n \nThis role will be based onsite in the Alexandria, VA area and an active Secret (TS/SCI eligible) security clearance is required prior to start. Partial remote work may be allowed at Program and Customer Leadership’s discretion. \n \n \nPrimary Responsibilities: \n \n \n

• Conduct cybersecurity related audits, inspections, vulnerability assessments, compliance assessments, Security Readiness Review (SRR), and ensure compliance with Cyber Security Service Provider (CSSP) and Command Cyber Readiness Inspection (CCRI) evaluation criteria. \n
• Execute Site Assistance Visits (SAVs) to ensure regulatory compliance with Command Cyber Operational Readiness Inspection (CCORI), Public Key Infrastructure (PKI), North Atlantic Treaty Organization (NATO), and Balanced Survivability Assessment (BSA). \n
• Manage projects, track and report completion/closure of inspection findings documented in Plan of Actions and Milestones (POA&M) and other action item in the Inspection Findings Reports \n
• Identify systems and assets that are not sufficiently assessed through automated scanning or routine, periodic assessments and recommend and/or conduct customized, manual assessments of systems as required to ensure proper evaluation for compliance \n
• Track and maintain Post Inspection Finding Remediation and POA&M Status Report for all inspections \n
• Validate remediation of the findings or submit the artifacts/or POA&Ms to inspecting organization for approval \n
• Perform technical, operational, and non-technical CCRI evaluation areas including, internal and external network infrastructure, Domain Name System (DNS), internal network vulnerability scan, wireless and mobile security, enclave security, Host Based Security System (HBSS), configuration reviews, traditional/physical security, releasable (REL) networks, database security, cross domain solutions, Voice over Internet Protocol (VoIP), Voice over Secure Internet Protocol (VoSIP), Video Teleconference (VTC), exchange services, different operating systems (specifically UNIX, Windows, Linux), web servers, REL networks and compliance directives. \n

• Bachelor’s degree in Science or Engineering Discipline and 8+ years of experience is required. Additional experience may be considered in lieu of degree. \n
• DoD 8570 IAT Level II certification. \n
• Active Secret (TS/SCI eligible) security clearance is required prior to start. \n

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com. \n \n If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission. \n \n \nCommitment to Non-Discrimination \n \n All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.”, “hiringOrganization”: {“@type”: “Organization”, “name”: “Leidos”, “logo”: “https://jobs.military.com/attachments/employer/0/962/152/273.svg”}, “jobLocation”: {“address”: {“addressCountry”: “United States”, “streetAddress”: “Not specified”, “@type”: “PostalAddress”, “postalCode”: “22314”, “addressLocality”: “Alexandria”, “addressRegion”: “Virginia - VA”}, “@type”: “Place”}, “industry”: “Information”, “identifier”: {“@type”: “PropertyValue”, “name”: “Leidos”, “value”: “R-00196228”}, “baseSalary”: {“@type”: “MonetaryAmount”, “currency”: “USD”, “value”: {“minValue”: “107900”, “@type”: “QuantitativeValue”, “maxValue”: “195050”, “value”: “107900”, “unitText”