Information System Security Engineer

Leidos

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Norfolk, VA
Salary
$87,100–$157,450 / yr
Posted
23 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $162k
This role $122k
$73k most similar roles pay here $215k

This role pays less than 84% of similar roles. Most pay $135,000–$189,780 — the shaded band above. At the midpoint, this role pays about $122k versus about $162k for comparable roles.

Based on 239 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 264 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 245 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Information System Security Engineer

Information System Security Engineer The Information System Security Engineer joins the team to support cybersecurity authorization efforts for the SMIT program, which manages the core backbone of the Navy's enterprise network. This role serves as a primary point of contact for Authorization to Operate packages under the Risk Management Framework. Key responsibilities include developing and reviewing assessment artifacts, evaluating hardware and software against NIST SP 800-53 Rev 5 controls, and managing submissions within eMASS. The engineer will monitor system resources via automated scanning, verify patch compliance using ACAS and Microsoft Defender for Endpoints, and coordinate STIG checklists for various components. Essential skills include proficiency in RMF processes, MITRE ATT&CK techniques, and technical documentation like SOPs and POA&Ms. The role ensures secure network operations by managing dataflows, ports, protocols, and services to maintain compliance with DoDI 8500.01 and other federal standards.

What you'll do

  • Manage the full lifecycle of Authorization to Operate (ATO) packages under the Navy Risk Management Framework.
  • Develop and review cybersecurity artifacts for submission to eMASS to meet project milestones.
  • Evaluate hardware and software during pre-acquisition phases against NIST SP 800-53 security controls.
  • Monitor system resources through automated scanning and implement reporting feeds for compliance.
  • Verify patch compliance using ACAS, IAVA dashboards, and Microsoft Defender for Endpoints.
  • Coordinate the execution and review of Security Technical Implementation Guide (STIG) checklists.
  • Create and maintain security documentation including SOPs, TTPs, and Plan of Action and Milestones (POA&M).
  • Document Ports, Protocols, and Services (PPS) to ensure accurate dataflows and compliant CAL boundaries.

What we're looking for

  • Must be a U.S. citizen.
  • Must hold an active DoD Secret clearance.
  • Must hold an active security certification that meets DoD 8570 IAT level III or higher.
  • Bachelor's degree and 4 years of relevant experience, or Master's degree and 2 years of relevant experience in a related technical field.
  • Must have a complete understanding of RMF steps, specifically steps 4 through 7.
  • Experience with eMASS, ACAS, IAVA dashboards, and Microsoft Defender for Endpoints is required.
  • Knowledge of NIST SP 800-53 Rev 5 security controls and MITRE ATT&CK techniques is required.
  • Top Secret clearance, Cloud Authorizations experience, and ITIL Foundation V4 certification are preferred.

More like this

Similar roles

Information System Security Engineer

Booz Allen Hamilton

McLean, VA +1 88 days ago $99,000$225,000
RMF JSIG Splunk AWS Azure STIG SIPRNet CWAN EMASS SNOW Xacta Threat Modeling Risk Management Cybersecurity Engineering ICD-503 DAAG Type 1 Crypto
8+ yrs exp

Information Systems Security Engineer

Leidos

Reston, VA 21 days ago $87,100$157,450
AWS Cross Domain Solutions (CDS) RMF NIST 800-53 FedRAMP Kubernetes Docker ACAS Nessus Prisma Cloud STIG VMware Azure Virtual Desktop Citrix Windows Linux IAM VPC eMASS
4+ yrs exp

Information Systems Security Engineer

Booz Allen Hamilton

Warner Robins, GA 14 days ago $99,000$225,000
RMF ATO ACAS STIGs Firewalls IDS IPS SIEM DevSecOps AWS Agile Linux UNIX Ubuntu Red Hat AI/ML Cybersecurity Engineering
3+ yrs exp

Information System Security Engineer

Leidos

Stennis, MS 36 days ago $107,900$195,050
RMF STIGs SCAP Information Assurance Cybersecurity System Security Engineering Security+ CISSP CISM CAP ISSEP Risk Management ATO System Administration
8+ yrs exp

Information Systems Security Engineer

Booz Allen Hamilton

Warner Robins, GA 60 days ago $99,000$225,000
RMF ATO ACAS STIGs Firewalls IDS IPS SIEM DevSecOps AWS Agile Linux UNIX Ubuntu Red Hat AI/ML Cybersecurity Engineering IT Service Management
3+ yrs exp