Security Engineer / IT Help Desk Technician

Leidos is seeking a Junior-level Security Engineer and IT Help Desk Technician to support the National Digital Exploitation & OSINT Center (NDOC) in Bethesda, MD. This onsite role blends security engineering work aligned to STIG/NIST and RMF/ATO requirements with first-line help desk support for customer incidents and service requests.

In this position, you will help maintain security compliance across project and service activities in support of an ATO while also providing technical support, troubleshooting, and escalation for complex issues. You will work with ISSMs and other engineering and operations stakeholders to plan, implement, and document security enhancements, monitoring, and reporting.

Key Responsibilities

• Apply system security engineering expertise across activities such as security design, engineering life cycle, risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, and certification and accreditation process support.
• Collaborate with systems architects and project managers to develop, plan, and implement system enhancements and upgrades to meet security requirements based on STIG and NIST 800-53.
• Provide technical support, troubleshooting, and complex problem resolution on escalated issues related to security enhancements implemented within the infrastructure.
• Support identification, implementation, automatic monitoring, and automatic reporting of security requirements and objectives in compliance with NMEC2 RMF and other directives as detailed by the NMEC2 ISSM.
• Help ensure applicable security requirements are met in accordance with existing and evolving IA reference security documents.
• Provide written input to the ISSMs when a security-relevant change is required for existing systems or contractors.
• Assist ISSMs with security requirements analysis as needed for security compliance, and relay findings that may impact design, operations, or performance to relevant engineering or operations groups.
• At Government direction, assist ISSMs to enhance and deploy security services architecture.
• Participate in customer Technical Exchange Meetings (TEMs) and Security TEMs to gather requirements and support systems security and accreditation when required.
• Maintain currency on system security documentation (body of evidence) for accreditation documentation aligned to NIST 800-53 controls supporting ATO.
• Collaborate on IA activities with NMEC2, the ISSMs, and Cyber Security Program Offices to incorporate NMEC2 RMF strategic goals and objectives.
• Support ATO activities within NMEC and with NMEC IT customers, including verifying security measures are taken, maintained, reported on, and updated as required.
• Support ATO documentation updates by providing input to IA (via assigned ISSM(s)) to edit JAVA and POA&M documentation when expected measures have not been implemented.
• Support mission objectives in accordance with applicable security policies and directives.
• Work with NMEC2 ISSM and Operations & Maintenance to ensure systems comply with ICD-503 and other security directives, including firewall and controlled interface security architecture design and enhancement.
• Help implement automated management, automated monitoring, and automated reporting of ongoing security hardening, patching, and virus checking, along with procedural protective measures and automation to maintain compliance toward ATO.
• Serve as the first point of contact for customer walkup, phone, email, or chat queries and incidents.
• Administer accounts including account creation, password resets, troubleshooting, and termination/deletion.
• Document and track customer requests and incidents in the customer-approved ITSM solution.
• Document initial troubleshooting and triage steps, escalate to Tier 2/3 support when appropriate, and ensure tickets are logged and assigned correctly.
• Proactively monitor incidents for trends and potential problem records, and highlight findings to the Service Desk Manager.
• Update Service Desk documentation and produce customer-facing and internal knowledge base content as required.
• Participate in Continual Service Improvement Activities to share experience and support service enhancements.

Required Qualifications

• Customer service skills to interact with end-users and communicate technical information clearly and understandably.
• Experience creating and managing domain accounts in Active Directory.
• Familiarity with virtual desktops running Microsoft Windows.
• Experience troubleshooting common Active Directory account issues and errors.
• Experience troubleshooting software and hardware issues for end user devices, including workstations, printers, and scanners.
• Experience addressing application performance and latency problems related to security requirements across front, middle, and back-end systems.
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, and DFS.
• Experience implementing security controls on common network services such as file, email, and Active Directory across geographically dispersed sites.
• Experience with networking technologies and security assessment, including STIGs.
• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS.
• Network and systems troubleshooting experience with TCP/IP, Internet security, and encryption (data at rest and data in transit).
• Time management skills to work independently and prioritize based on customer and mission impact.
• Ability to use an IT Service Management (ITSM) tool to document, track, and resolve incidents and requests.
• Ability to triage, classify, and prioritize incidents.
• Strong oral and written communication skills.
• Experience establishing goals and plans aligned to project objectives.
• Proficiency with MS Office, the Internet, and other internal applications for research and routine to moderately complex tasks.
• Ability to produce clear documents and diagrams for networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel, and MS Word.
• Minimum certification aligned to DoD 8570.11 IAT Level II requirements, such as Security+ CE, CCNA-Security, GSEC, or SSCP, along with an appropriate Computing Environment (CE) certification.

Location and Employment Details

• Location: Bethesda, MD (onsite)
• Experience: 2+ years
• Education: Bachelor’s degree
• Salary: USD 57,850 to 104,575 per year

Clearance

• US Citizenship required
• Clearance: Active TS/SCI with Polygraph required, or active TS/SCI with willingness to obtain a Polygraph

Technologies

• Active Directory, Microsoft Windows, Windows Server 2016/2019, IIS, DNS, DHCP, Exchange, DFS
• Splunk, McAfee HBSS, ACAS
• TCP/IP, STIGs, NIST 800-53, NMEC2 RMF, NIST 800-53 controls
• NMEC2 ISSM, IT Service Management (ITSM) solution
• MS Office, MS Visio, MS Project, MS Excel, MS Word
• JAVA, POA&M

Benefits

• Competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave
• Retirement