[Hiring] Cybersecurity Engineer / Information System Security Engineer @Leidos

Role Description

Leidos is seeking an experienced Cybersecurity Engineer / Information System Security Engineer (ISSE) to support the security engineering, system authorization, compliance, and continuous monitoring of enterprise healthcare technology solutions supporting the Department of Defense (DoD) and Defense Health Agency (DHA).

The successful candidate will be responsible for:

• Developing and maintaining system security documentation.
• Supporting implementation and validation of cybersecurity controls.
• Preparing authorization artifacts.
• Coordinating activities required to obtain and maintain an Authority to Operate (ATO).

The supported environment includes:

• Salesforce Health Cloud
• Amazon Connect
• AWS GovCloud
• Identity and access management services
• Enterprise integrations
• Associated cloud infrastructure

This position will work closely with:

• Leidos cybersecurity leadership
• Government security personnel
• System administrators
• Developers
• Solution architects
• Cloud engineers

Primary Responsibilities:

• Support cybersecurity engineering throughout system design, development, integration, deployment, and sustainment of Salesforce Health Cloud, Amazon Connect, and associated cloud services.
• Develop, maintain, and coordinate required DoD/DHA ATO and Risk Management Framework (RMF) documentation, including System Security Plans (SSPs), security control implementation narratives, security boundary diagrams, data flow diagrams, and supporting authorization artifacts.
• Prepare and maintain security control responsibility matrices, hardware/software inventories, ports and protocols documentation, interconnection agreements, and Plans of Action and Milestones (POA&Ms).
• Coordinate with government Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), security assessors, and Leidos cybersecurity personnel throughout the authorization process.
• Review system architectures, integrations, cloud configurations, and application designs to identify cybersecurity requirements, risks, and potential compliance gaps.
• Support implementation and validation of NIST SP 800-53 security controls, secure configuration baselines, access controls, encryption, logging, and monitoring capabilities.
• Evaluate cloud service security requirements, inherited controls, shared responsibility models, and authorization boundaries for Salesforce, AWS, and associated services.
• Coordinate vulnerability assessments, security scanning, configuration reviews, and remediation activities across system components.
• Track cybersecurity findings, vulnerabilities, POA&Ms, and corrective actions through validation and closure.
• Support continuous monitoring activities, including security control assessments, audit log reviews, vulnerability reporting, and compliance documentation.
• Conduct security impact assessments for application enhancements, configuration changes, new integrations, and software releases.
• Collaborate with developers and administrators to implement secure development practices and remediate application security vulnerabilities.
• Support security incident investigation, response coordination, evidence collection, and corrective action activities in accordance with approved procedures.
• Maintain accurate security documentation, authorization evidence, compliance records, and technical security procedures.
• Communicate cybersecurity risks, authorization status, compliance findings, and remediation progress to program management and government stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related technical discipline and 4–8 years of relevant experience, or a master's degree with 2–6 years of relevant experience. Equivalent experience may be considered in accordance with Leidos policies.
• At least 3 years of experience in cybersecurity engineering, information assurance, system security engineering, or security assessment and authorization activities.
• Demonstrated experience supporting DoD Risk Management Framework (RMF) processes and preparing or maintaining system authorization documentation.
• Experience developing System Security Plans, security control implementation narratives, POA&Ms, and supporting ATO artifacts.
• Working knowledge of NIST SP 800-53 security controls, DoD cybersecurity policies, and system authorization requirements.
• Experience reviewing technical architectures, system configurations, data flows, and security control implementations.
• Familiarity with cloud security principles, shared responsibility models, identity and access management, encryption, logging, and vulnerability management.
• Experience reviewing vulnerability assessment results, tracking remediation activities, and supporting continuous security monitoring.
• Strong analytical, problem-solving, technical documentation, communication, and collaboration skills.
• Ability to independently manage cybersecurity engineering assignments and coordinate with developers, administrators, cybersecurity personnel, and government representatives.
• Ability to meet applicable DoD/DHA personnel security and suitability requirements.
• Ability to satisfy applicable DoD cybersecurity workforce qualification requirements for the assigned position.

Preferred Qualifications

• Experience supporting ATO activities for DoD, DHA, VA, or other federal healthcare systems.
• Experience preparing authorization packages for cloud-hosted or SaaS-based enterprise applications.
• Familiarity with Salesforce Government Cloud Plus / Government Cloud Plus – Defense security architecture.
• Experience with AWS GovCloud, Amazon Connect, AWS IAM, CloudTrail, CloudWatch, and associated AWS security capabilities.
• Experience supporting DoD IL4/IL5 environments and understanding of the DoD Cloud Computing.

Pay Range

Pay Range $87,100.00 - $157,450.00. The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.