Cyber Security STIG Tester

About the role

Leidos is seeking a Cyber Security STIG Tester to join its GSMO-II team at Ft. Meade, MD. The selected candidate performs or reviews technical security assessments using STIG checklists, SCAP scans and ACAS/ESS scans of computing environments to find vulnerabilities, non-compliance with Information Assurance guidelines and regulations, and recommends mitigation strategies. The role ensures that environments hosting DoD information systems are secure and compliant, assesses threats, contributes to security design and architecture reviews, runs RMF STIG and compliance testing, and reports to security briefings.

Key responsibilities

• Keep STIG checklists current and enforce their settings across workstations, servers and networks with minimal operational impact
• Help systems and network administrators keep their systems up to date with STIG checklists and explain required edits
• Review STIG test results and pass them to system owners and administrators, track response times and report on security briefings
• Support POA&M analysis and coordination, including eMASS updates
• Run cybersecurity lab testing and hardening for deployments and updates of systems and applications
• Review ACAS/ESS scan data and set tickets to add new equipment to scans
• Maintain SOPs for testing and reporting, support functional testing of new technology and prepare for testing events
• Perform vulnerability and risk analyses throughout the system development life cycle
• Support Authorizing Official actions by presenting security testing artifacts in line with RMF (NIST 800-37 rev. 2) and agency requirements

Required profile

• Bachelor's degree and 8+ years of experience; additional directly applicable experience may be accepted in lieu of a degree
• Active Secret security clearance (U.S. citizenship required); applicants are subject to a government security investigation
• Experience with STIG compliance, SCAP tools, vulnerability assessments and reporting
• Experience using eMASS and/or Xacta
• Solid understanding of the Risk Management Framework (RMF) and SDLC, and of hardware and software engineering best practices
• Analytical and problem-solving skills; eligibility for the specified contract

Required skills

• STIG compliance and SCAP scanning
• Vulnerability and assessment scans with multiple tools
• eMASS and/or Xacta
• RMF and SDLC
• Preferred: ACAS training and ability to work in a virtual team

Pay range: $107,900 - $195,050.