Assessment & Authorization Analyst

Leidos

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Ashburn, VA
Salary: $87,100–$157,450 / yr
Posted: 36 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $132k

This role $122k

$78k most similar roles pay here $170k

This role pays less than 58% of similar roles. Most pay $110,630–$153,125 — the shaded band above. At the midpoint, this role pays about $122k versus about $132k for comparable roles.

Based on 239 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 264 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 245 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Assessment & Authorization Analyst

Role Posting Log in to save

Assessment & Authorization Analyst The Assessment & Authorization Analyst joins the Customs and Border Protection Security Operations Center to protect enterprise-wide information systems from cyber threats across networks, cloud environments, and mobile devices. This role involves evaluating new information systems to ensure they meet required security standards before deployment or during major updates. The analyst performs formal assessments of security postures, evaluates whether controls function effectively, creates critical documentation like System Security Plans and Security Assessment Reports, and determines final authorizations to operate. Key responsibilities include managing access controls, configuration management, and contingency planning. The position requires expertise in the NIST Risk Management Framework, DHS 4300A Policy, and CBP Information Systems Security Policies. Candidates must possess strong writing and critical analysis skills while demonstrating deep knowledge of information assurance, information technology, and information management concepts to mitigate risks within the federal infrastructure.

Skills

NIST Risk Management Framework RMF Information Assurance System Security Plan Security Assessment Report ATO Configuration Management Application Security Data Management NIST SP 800-37 CGRC CISSP CISA CASP+ DoD 8570

What you'll do

Evaluate information systems to ensure they meet required security standards and are authorized to operate on the network.
Conduct formal assessments of system security postures using the NIST Risk Management Framework or similar methodologies.
Create essential security documentation, including System Security Plans and Security Assessment Reports.
Determine if systems should be granted an Authorization to Operate based on assessment outcomes.
Verify that security controls are functioning effectively to minimize risks within the enterprise environment.
Provide technical expertise on access controls, configuration management, and data management system controls.
Document assessment results and provide formal recommendations for improving overall system security.

What we're looking for

Must be a U.S. citizen.
Bachelor's degree with 4-8 years of IT/Cybersecurity experience, or a Master's degree with 2 years of experience.
Alternative requirement of a Bachelor's degree with 8 years of IT/Cybersecurity experience, or a Master's degree with 6 years of experience.
Minimum of 1-3 years of experience as an ISSO supporting major federal information systems or applications.
Working knowledge of NIST SP 800-37, DHS 4300A Policy, and CBP Information Systems Security Policies and Procedures Handbook.
Deep understanding of Information Assurance, Information Technology, and Information Management concepts and procedures.
Superior writing, communication, and critical analysis skills.
Preferred certifications include CompTIA CASP+, ISC2 CGRC, CISSP, or ISACA CISA.

Save