Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

Leidos is hiring a hands-on Information Assurance Security Engineer to secure and maintain enterprise mission systems in Suitland, MD under an active TS/SCI clearance.

Responsibilities

• Act as a primary security engineering resource for enterprise infrastructure, delivering hands-on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.
• Research and assess cybersecurity tools, technologies, and methodologies to identify improvements to enterprise security.
• Support architecture and engineering reviews and provide security guidance for new capabilities, technologies, and infrastructure changes.
• Troubleshoot complex security issues across storage, networking, operating systems, authentication, and broader enterprise infrastructure.
• Perform vulnerability assessments, ethical hacking, and penetration testing to detect and address security risks.
• Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and associated management interfaces.
• Apply and validate applicable DISA STIGs, SRGs, vendor security guidance, and industry security best practices.
• Configure and maintain secure administrative access using SSH, HTTPS/TLS, RBAC, centralized authentication, and least privilege principles.
• Develop and deliver training on cybersecurity tools, technologies, and processes.

Requirements

• Education and experience: Bachelor’s degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or related field with 8+ or 12+ years experience; or Master’s degree with 6+ or 10+ years experience.
• Clearance: Active TS/SCI clearance in DISS and required program access.
• Security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.
• Extensive experience with Intelligence Community (IC), DoD, DISA, NAVINTEL Cybersecurity, FLTCYBERCOM, and DoDIIS processes, tools, systems, reporting mechanisms, and requirements for Assessment and Authorization (A&A).
• Software development experience using Java, C, C++, or other programming/scripting languages, including experience designing and developing host based and network based scanning tools.
• Experience with SCAP (Security Content Automation Protocol) based tools and specifications.
• Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.
• Extensive experience hardening modern Unix operating systems, including Oracle Solaris 10/11 and RHEL, and Microsoft Windows environments using STIGs.
• Extensive experience securing systems and software in alignment with IC, DoD, and industry security best practices.
• Experience developing security controls, testing methodologies, and test procedures for systems, cloud-based architectures, and Cross Domain Solutions (CDS).
• Demonstrated ability to take a proactive, results-oriented approach while building effective customer and team relationships.
• IAM Level III DoD 8140 approved baseline certification, such as CISSP or SecurityX.

Technologies

• Java, C, C++
• Security Content Automation Protocol (SCAP)
• Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, STIG Manager
• SSH, HTTPS/TLS, RBAC
• NFS, SMB/CIFS, iSCSI
• DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs)
• DoD RMF, ICD 503, NIST Risk Management Framework
• Oracle Solaris 10, Oracle Solaris 11, RHEL

Benefits

• Competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave and Retirement

• Location: Suitland, MD (onsite)
• Salary: USD 107,900 - 195,050 per year
• Clearance: Active TS/SCI
• Original posting date: October 30, 2026
• Pay range: $107,900.00 - $195,050.00