Cyber Security STIG Tester

Leidos

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Fort George G. Meade, MDOdenton, MD
Salary: $107,900–$195,050 / yr
Employment: Full-time
Posted: 47 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $167k

This role $151k

$97k $209k

below market most similar roles pay here above market

This role pays less than 57% of similar roles. Most pay $138,375–$195,812 — the blue band above. At the midpoint, this role pays about $151k versus about $167k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Cyber Security STIG Tester

Role Posting Log in to save

The Cyber Security STIG Tester joins the GSMO-II team to perform technical security assessments of computing environments. The role involves identifying vulnerabilities and non-compliance with Information Assurance guidelines by utilizing STIG Checklists, SCAP scans, and ACAS/ESS scans. Key responsibilities include enforcing security settings on workstations, servers, and networks, developing security approaches, and providing inputs on security designs and architectures. The candidate will perform RMF STIG compliance testing, support POA&M analysis, and maintain SOPs for testing and reporting. Required technical skills include experience with SCAP tools, eMASS, Xacta, and the Risk Management Framework. The position requires a solid understanding of the System Development Life Cycle and hardware and software engineering best practices to ensure DoD information systems remain secure and compliant with NIST 800-37 requirements.

Skills

STIG SCAP ACAS ESS RMF NIST 800-37 eMASS Xacta SDLC Vulnerability Assessment Information Assurance POA&M DoD 8570 Security

What you'll do

Perform technical security assessments using STIG Checklists, SCAP scans, and ACAS/ESS scans to identify vulnerabilities.
Ensure STIG settings are enforced across all workstations, servers, and network systems with minimal operational impact.
Review ACAS/ESS scan data and generate tickets to include new equipment in active scans.
Perform cybersecurity lab testing and hardening activities to support the deployment of new systems and applications.
Conduct vulnerability and risk analyses of computer systems and applications throughout the system development life cycle.
Support POA&M analysis and coordination efforts, including regular updates to the eMASS system.
Provide security testing artifacts to support Authorizing Official actions in accordance with RMF and NIST 800-37 requirements.
Maintain standard operating procedures for all testing and reporting activities.

What we're looking for

Must hold an active Secret security clearance.
Must be a U.S. Citizen.
Bachelor’s degree and 8+ years of experience; additional years of directly applicable experience may be accepted in lieu of a degree.
Prior relevant experience working with STIG Compliance, SCAP tools, vulnerability assessments, and reporting.
Experience using eMASS and/or Xacta.
Solid understanding of the Risk Management Framework (RMF) and the System Development Life Cycle (SDLC).
Current DoD 8570 IAT II Certification (Sec+).
Ability to work successfully as part of a virtual team (preferred).

Similar roles

Security Control Assessor

Leidos

Alexandria, VA +2 27 days ago $69,550–$125,725

RMF STIGs eMASS Nessus ACAS SCAP HBSS NIST SP 800-53 NIST SP 800- 37 CNSSI 1253 Vulnerability Assessment Cyber Threat Emulation Cloud Native Tools Windows UNIX Network Security Endpoint Security Solutions Databases TTPs

5+ yrs exp

Save

SCA-R Validator

Leidos

Alexandria, VA +2 27 days ago $87,100–$157,450

RMF STIG SRG NIST SP 800-53 NIST SP 800- 37 CNSSI 1253 eMASS Nessus ACAS SCAP HBSS FISMA FIPS199 Windows UNIX Network Security POA&M Endpoint Security Solutions

8+ yrs exp

Save

Cyber Software Test Engineer

Northrop Grumman

Cincinnati, OH 4 days ago $91,800–$137,600

Python Wireshark IDAPro OllyDebug WinDBG JTAG Ghidra Git GitHub GitLab Jenkins GitHub Actions GitLab CI QEMU Renode TCP/IP UDP Assembly x86 x64 MIPS PPC ARM Linux Windows Android iOS CI/CD Agile SDLC Reverse Engineering Kernel Development Embedded Programming Vulnerability Research ROP

2+ yrs exp

Save

Cyber Test Engineer

Booz Allen Hamilton

Rome, NY 126 days ago

NIST 800-53 Penetration Testing Adversarial Emulation Kali Linux Wireshark Tripwire Burp Suite Metasploit Python Ruby Bash Linux Networking Virtualization Mandatory Access Controls Discretionary Access Controls Vulnerability Assessment Security+ CE OSCP CISSP CASP Red Hat CSA GPEN

Save

Cyber Test Engineer

Booz Allen Hamilton

Rome, NY 42 days ago

NIST 800-53 Penetration Testing Adversarial Emulation Python Ruby Bash Linux Kali Linux Wireshark Tripwire Burp Suite Metasploit Networking Virtualization Mandatory Access Controls Discretionary Access Controls Vulnerability Assessment Security+ CE OSCP CISSP CASP Red Hat CSA GPEN

Save

Security System Test Engineer

Qualcomm

San Diego, CA 26 days ago $121,800–$182,600

C C++ Assembly ARM RISCV Git Perforce JIRA Agile Cryptography Lauterbach Trace32 ASIC Design Hardware Security FIPS SESIP Common Criteria Global Platform Operating Systems

2+ yrs exp

Save