Information System Security Officer (MID)

About the role

The Digital Sector at Leidos is hiring an Information System Security Officer (MID) to support the Homeland Enterprise Information Technology Secure Services and Support (HEITS) contract under the Department of Homeland Security (DHS) Insider Threat Program (ITP). The ITP uses advanced analytics, monitoring and data correlation to identify insider threats that could compromise the DHS mission. The officer supports security accreditation and sustainment activities.

Key responsibilities

• Support security engineering and the integration and deployment of security technology for external threat, insider threat and cyber operations.
• Resolve UAM component concerns within 48 hours and acknowledge government requests within 1 hour during normal business hours.
• Perform weekly vulnerability scans (or as directed) in support of FISMA, coordinating with system owners and administrators so results are sent to the ITP for analysis.
• Support security assessments by helping define scope, develop test plans and rules of engagement, obtain government approval, analyze results, write reports and hold briefings.
• Report quarterly on scan coverage and issues, and perform technical analysis of scan results, reporting monthly or at government request.
• Conduct ITP-directed vulnerability scans for operational matters and support baseline compliance for systems being accredited or reaccredited.
• Review ongoing Authority to Operate (ATO), Authority to Connect (ATC) and Interim Authorization to Test (IATT) and brief their status in the Weekly Activity Report.
• Develop a schedule for submitting Assessment and Authorization (A&A) packages, maintain Body of Evidence (BOE) documentation, and update it with product updates and security posture changes.

Required profile

• Bachelor's degree and 8+ years of prior relevant experience, or a Master's degree and 6+ years; additional experience or education may be considered in lieu of a degree.
• DHS EOD SCI clearance required.
• Excellent written and oral communication skills, and experience developing technical documents, analyses and reports.
• Experience preparing and presenting briefings to senior customer management and stakeholders.

Preferred qualifications

• Master's degree in IT Management, Engineering or a related field.
• 6+ years of Information Assurance Management experience.
• Security+ or similar certification.
• Extensive experience with the Risk Management Framework (RMF) and ICD-503.
• Experience developing security accreditation packages and achieving Authorities to Operate (ATOs).
• Experience supporting security accreditation within the Intelligence Community.