Senior ISSE / Penetration Tester

Leidos

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Annapolis Junction, MD
Salary: $131,300–$237,350 / yr
Posted: 136 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $169k

This role $184k

$119k most similar roles pay here $250k

This role pays more than 67% of similar roles. Most pay $145,269–$193,500 — the shaded band above. At the midpoint, this role pays about $184k versus about $169k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 264 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 245 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Senior ISSE / Penetration Tester

Role Posting Log in to save

Senior ISSE/Penetration Tester joins the Cyber & Analytics Business Area to support a large, complex program involving security engineering and network operations. This role involves validating system security requirements, designing architectures for geographically distributed components, and managing risk throughout the program lifecycle. The individual will lead Security Testing Events by conducting internal and external penetration tests, performing web application and physical testing, and researching tools to enhance capabilities. Key responsibilities include auditing configurations, ensuring compliance with policy, and collaborating with engineering teams to secure hardware and software architectures. Required expertise includes proficiency with Nessus, NMAP, Wireshark, and various encryption techniques. The role addresses critical security challenges within a complex network environment, requiring the candidate to mitigate threats while ensuring that all system implementations meet rigorous security standards for processing sensitive information across diverse infrastructure components.

Skills

Penetration Testing Nessus NMAP Wireshark Risk Management Framework Agile Public Key Infrastructure Firewalls Scripting Information Assurance Security Architecture Configuration Management Incident Response Defense in Depth

What you'll do

Conduct internal and external penetration tests against systems to identify vulnerabilities and develop mitigation strategies.
Perform web application penetration testing and physical security engineering analysis.
Validate system security requirements and establish designs for large-scale, geographically distributed networks.
Assess and mitigate security threats and risks throughout the entire program life cycle.
Audit and assess system security configuration settings using standard tools like Nessus, NMAP, and Wireshark.
Develop technical solutions, products, and standards based on current and desired security architectures.
Formulate security compliance requirements for new features and ensure systems meet specific customer requirements.
Provide subject matter expertise on security architecture to program managers and internal technical teams.

What we're looking for

Must have a Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related field.
Must have at least 12 years of relevant experience (additional experience may be substituted for a degree).
Must possess an active TS/SCI clearance with Polygraph.
Must have extensive knowledge of security tools including Nessus, NMAP, and Wireshark.
Must have hands-on experience in vulnerability testing, web application penetration testing, and physical penetration testing.
Must have experience applying Risk Management Framework (RMF) and formulating IT security policies.
Must have expertise in Defense in Depth principles, including access control, PKI, and network architecture.
Preferred certifications include CISSP, ISSEP, GWAPT, GPEN, CEH, CISM, or GWEB.

Save