nCybersecurity Engineer / Information System Security Engineer

The successful candidate will be responsible for developing and maintaining system security documentation, supporting implementation and validation of cybersecurity controls, preparing authorization artifacts, and coordinating activities required to obtain and maintain an Authority to Operate (ATO). The supported environment includes Salesforce Health Cloud, Amazon Connect, AWS GovCloud, identity and access management services, enterprise integrations, and associated cloud infrastructure. \n \n This position will work closely with Leidos cybersecurity leadership, government security personnel, system administrators, developers, solution architects, and cloud engineers to ensure system development and operations comply with applicable DoD/DHA cybersecurity requirements throughout the system lifecycle. \n \n \nPrimary Responsibilities \n \n \n

• Support cybersecurity engineering throughout system design, development, integration, deployment, and sustainment of Salesforce Health Cloud, Amazon Connect, and associated cloud services. \n
• Develop, maintain, and coordinate required DoD/DHA ATO and Risk Management Framework (RMF) documentation, including System Security Plans (SSPs), security control implementation narratives, security boundary diagrams, data flow diagrams, and supporting authorization artifacts. \n
• Prepare and maintain security control responsibility matrices, hardware/software inventories, ports and protocols documentation, interconnection agreements, and Plans of Action and Milestones (POA&Ms). \n
• Coordinate with government Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), security assessors, and Leidos cybersecurity personnel throughout the authorization process. \n
• Review system architectures, integrations, cloud configurations, and application designs to identify cybersecurity requirements, risks, and potential compliance gaps. \n
• Support implementation and validation of NIST SP 800-53 security controls, secure configuration baselines, access controls, encryption, logging, and monitoring capabilities. \n
• Evaluate cloud service security requirements, inherited controls, shared responsibility models, and authorization boundaries for Salesforce, AWS, and associated services. \n
• Coordinate vulnerability assessments, security scanning, configuration reviews, and remediation activities across system components. \n
• Track cybersecurity findings, vulnerabilities, POA&Ms, and corrective actions through validation and closure. \n
• Support continuous monitoring activities, including security control assessments, audit log reviews, vulnerability reporting, and compliance documentation. \n
• Conduct security impact assessments for application enhancements, configuration changes, new integrations, and software releases. \n
• Collaborate with developers and administrators to implement secure development practices and remediate application security vulnerabilities. \n
• Support security incident investigation, response coordination, evidence collection, and corrective action activities in accordance with approved procedures. \n
• Maintain accurate security documentation, authorization evidence, compliance records, and technical security procedures. \n
• Communicate cybersecurity risks, authorization status, compliance findings, and remediation progress to program management and government stakeholders. \n

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related technical discipline and 4-8 years of relevant experience, or a master’s degree with 2-6 years of relevant experience. Equivalent experience may be considered in accordance with Leidos policies. \n
• At least 3 years of experience in cybersecurity engineering, information assurance, system security engineering, or security assessment and authorization activities. \n
• Demonstrated experience supporting DoD Risk Management Framework (RMF) processes and preparing or maintaining system authorization documentation. \n
• Experience developing System Security Plans, security control implementation narratives, POA&Ms, and supporting ATO artifacts. \n
• Working knowledge of NIST SP 800-53 security controls, DoD cybersecurity policies, and system authorization requirements. \n
• Experience reviewing technical architectures, system configurations, data flows, and security control implementations. \n
• Familiarity with cloud security principles, shared responsibility models, identity and access management, encryption, logging, and vulnerability management. \n
• Experience reviewing vulnerability assessment results, tracking remediation activities, and supporting continuous security monitoring. \n
• Strong analytical, problem-solving, technical documentation, communication, and collaboration skills. \n
• Ability to independently manage cybersecurity engineering assignments and coordinate with developers, administrators, cybersecurity personnel, and government representatives. \n
• Ability to meet applicable DoD/DHA personnel security and suitability requirements. \n
• Ability to satisfy applicable DoD cybersecurity workforce qualification requirements for the assigned position. \n, * Experience supporting ATO activities for DoD, DHA, VA, or other federal healthcare systems. \n
• Experience preparing authorization packages for cloud-hosted or SaaS-based enterprise applications. \n
• Familiarity with Salesforce Government Cloud Plus / Government Cloud Plus - Defense security architecture. \n
• Experience with AWS GovCloud, Amazon Connect, AWS IAM, CloudTrail, CloudWatch, and associated AWS security capabilities. \n
• Experience supporting DoD IL4/IL5 environments and understanding of the DoD Cloud Computing \n

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com. \n \n If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission. \n \n \nCommitment to Non-Discrimination \n \n All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws. \n \n #Remote”, “hiringOrganization”: {“@type”: “Organization”, “name”: “Leidos”, “logo”: “https://jobs.military.com/attachments/employer/0/962/152/273.svg”}, “jobLocation”: {“address”: {“addressCountry”: “United States”, “streetAddress”: “Not specified”, “@type”: “PostalAddress”, “postalCode”: “20170”, “addressLocality”: “Remote”, “addressRegion”: “Not specified”}, “@type”: “Place”}, “industry”: “Other Services (except Public Administration)”, “identifier”: {“@type”: “PropertyValue”, “name”: “Leidos”, “value”: “R-00196903”}, “baseSalary”: {“@type”: “MonetaryAmount”, “currency”: “USD”, “value”: {“minValue”: “87100”, “@type”: “QuantitativeValue”, “maxValue”: “157450”, “value”: “87100”, “unitText”

If you’re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already at step 30 - and moving faster than anyone else dares.