This role pays less than
94%
of similar roles. Most pay
$120,762–$166,750
— the shaded band above.
At the midpoint, this role pays about
$98k
versus about
$144k
for comparable roles.
Based on 240 similar postings.
Employer
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.
Leidos currently has
374 open roles
on FindRole.
Listed pay typically runs
$92,300–$166,850
across 316 roles with salary data.
Vulnerability Analyst - Night Shift joins the Compartmented Enterprise Services Office team to support a modern secure web service operation during a migration to a high security cloud environment. The role involves managing and maintaining the Information Assurance Vulnerability Alerts program, enforcing information security policies, and conducting risk assessments using NIST, RMF, and Common Criteria frameworks. Daily responsibilities include performing vulnerability management tasks such as scanning, assessment, reporting, and mitigation verification, while also coordinating with infrastructure, storage, database, and application teams to ensure compliance. The position requires proficiency in ACAS, SIEM tools like SPLUNK, eMASS, and ACT, along with experience in IAVA reporting and managing documentation like SAR and RAR. Technical expertise includes familiarity with Oracle, SQL Server, Exchange, virtualization platforms, Windows, Red Hat, and the DISA security model for cloud computing environments.
Perform vulnerability management including scanning, assessment, reporting, and mitigation verification.
Manage and maintain the Information Assurance Vulnerability Alerts (IAVA) program for CESO systems.
Conduct security and risk assessments using NIST, RMF, and Common Criteria frameworks.
Develop, organize, and track Risk Management Framework (RMF) documentation based on customer data.
Enforce information security policies and provide training to end-users on proper practices.
Coordinate with infrastructure, storage, database, and application teams to align vulnerability management activities.
Execute business continuity and disaster recovery activities for the secure cloud migration.
Maintain operational procedures and compliance reports to support the transition to a high-security cloud environment.
What we're looking for
Bachelor's degree and 2+ years of related IT security experience are required; additional education or training may be considered in lieu of a degree.
Active TS/SCI security clearance is required to start.
DoDD 8140 compliant certification, at minimum IAT Level II (e.g., Security+ CE), is required at start.
Experience with the Defense Information Systems Agency (DISA) security model, controls, and authorization processes for standard and cloud computing systems is required.
Experience conducting activities associated with Information Assurance Vulnerability Alerts (IAVA) is required.
Experience creating Information Assurance documentation such as SCTM, RAR, SAR, and maintaining POA&Ms is required.
Experience with ACAS and SIEM tools is required.
Experience with DISA support to mission partners or a TS/SCI with CI Polygraph is preferred.
Vulnerability Management
NIST
RMF
Common Criteria
ACAS
Splunk
eMASS
IAVA
CISA
Security+
SQL Server
Oracle
Red Hat
Windows
Disaster Recovery
Business Continuity
SCTM
RAR