Information Systems Security Engineer
Job Description
Leidos’ AEGIS program is seeking an Information Systems Security Engineer to support advanced cybersecurity engineering for NASA Advanced Supercomputing (NAS) systems and high-performance computing (HPC) environments. This onsite role in Mountain View, CA focuses on securing large-scale simulation and mission workloads by leading security planning, compliance execution, and risk-focused technical assessments.
The position requires deep expertise across security frameworks, HPC-specific architectures, and assessment and authorization activities. You will oversee System Security Plans (SSPs), coordinate remediation planning, and provide senior technical guidance to stakeholders working across systems engineering, networking, storage, and operations.
Responsibilities
- Ensure the compliance and integrity of System Security Plans (SSPs) and related security artifacts with NASA and U.S. Government security requirements, including NPR 2810.1F, NIST 800-53/53B, FISMA, and NIST HPC Security Overlay guidance.
- Act as a senior technical advisor on complex HPC security challenges, including hardening for MPI-based workloads, GPU/accelerator nodes, and high-speed fabrics such as InfiniBand and Slingshot, as well as performance-critical parallel filesystems.
- Evaluate and recommend advanced security solutions that support HPC performance while maintaining robust cybersecurity protections for large-scale simulation workflows, mission operations, and research productivity.
- Lead analysis and reporting for HPC-specific security data, including vulnerability assessments, risk evaluations, security telemetry, and compliance findings, providing actionable recommendations to Division and Branch leadership.
- Oversee development, tracking, and remediation of Plans of Action and Milestones (POA&Ms) across HPC systems, coordinating resolution activities with systems engineering, networking, storage, and operations teams.
- Lead complex compliance assessments for large-scale HPC environments, including high-speed interconnect configuration considerations, MPI-node exposure risks, GPU driver-level vulnerabilities, and HPC authentication and authorization workflows; present findings to NAS leadership.
- Provide technical leadership and coordination to implement, enforce, and maintain compliance with Government cybersecurity policies, including NPR 2810.1F, NIST 800-53/800-53B, NIST SP 800-234, DHS directives, FIPS standards, OMB guidance, and FISMA requirements.
- Coordinate senior technical expertise during NASA Assessment and Authorization (A&A) activities, including data calls, technical evaluations, control inheritance definitions, and documentation updates.
- Lead credentialed and performance-aware vulnerability assessments across HPC environments, ensuring scanning methodologies accommodate GPU nodes, high-speed fabrics, and parallel filesystems without impacting mission-critical workloads; analyze findings and provide risk-based recommendations to NAS leadership and Information System Security Officials (ISSOs).
- Evaluate and escalate potential or actual HPC security incidents to appropriate NAS or Agency personnel and support investigations with NASA SOC, Incident Response Teams, and NAS Management.
- Lead technical Root Cause Analysis (RCA) and recommend corrective actions for complex HPC security issues, including system performance anomalies, distributed job failures, and vulnerabilities in parallel computing environments.
- Provide technical guidance to help develop and refine cybersecurity policies, procedures, and guidelines so HPC computational, storage, networking, and data-analysis systems maintain NASA and federal security compliance.
- Maintain current HPC cybersecurity expertise by evaluating emerging threats, technologies, and advisories from NASA, NIST, DOE, and industry sources; provide technical guidance on HPC risks such as accelerator vulnerabilities, MPI/RDMA protocol threats, and job-scheduler exploitation vectors.
- Provide senior-level coordination and oversight of security compliance activities related to Section 508, Supply Chain Risk Management (SCRM), IPv6 adoption, and cybersecurity reviews for HPC IT acquisitions, including compute clusters, interconnects, accelerators, and data-storage hardware.
- Lead vulnerability assessments and contribute to the design and enhancement of intrusion detection tools for advanced network architectures supporting HPC environments.
Requirements
- Bachelor’s degree and at least 12 years of relevant experience in cybersecurity, information systems security, or a related technical discipline.
- Demonstrated experience managing complex technical projects, coordinating cross-functional activities, and ensuring successful execution of cybersecurity initiatives.
- Advanced technical knowledge of cybersecurity principles, security frameworks, risk management, and compliance requirements within complex IT environments.
- Ability to independently prioritize, delegate, and oversee multiple concurrent projects while aligning with technical requirements, organizational priorities, and established timelines.
- Demonstrated ability to provide technical leadership, mentor and develop team members, and coordinate workforce activities to achieve program objectives.
- Strong analytical, problem-solving, and decision-making skills for evaluating complex technical challenges and recommending effective solutions.
- Excellent collaboration and communication skills to work across multidisciplinary teams and engage technical stakeholders and leadership.
- U.S. Citizenship required.
- Ability to obtain and maintain a security clearance from Public Trust up to Top Secret, as required.
Technologies
- NPR 2810.1F
- NIST 800-53
- NIST 800-53B
- NIST SP 800-234 (HPC Security Overlay)
- FISMA
- InfiniBand
- Slingshot
- MPI
- RDMA
- GPU/accelerator nodes
- Section 508
- Supply Chain Risk Management (SCRM)
- IPv6
- FIPS standards
- OMB guidance
Benefits
- Health and Wellness programs
- Income Protection
- Paid Leave and Retirement
Compensation and Logistics
- Location: Mountain View, CA (onsite)
- Pay: USD 131,300 - 237,350 per year
- Original posting date: October 21, 2026
- FOR U.S. POSITIONS: subject to change based on business needs; job requisition reasonably anticipates remaining open for at least 3 days with an anticipated close date no earlier than 3 days after the original posting date
Securing Your Data
- Leidos will never ask for payment-related information during the employment application process.
- Leidos will never advance money as part of the hiring process.
- Leidos will only communicate through emails generated by the Leidos.com automated system, not via free commercial services or WhatsApp/Telegram.
- If an email requests payment-related or personal information, contact [email protected].