Cybersecurity Engineer Product Development

Leidos seeks a Cybersecurity Engineer to support the development, integration, testing, production, delivery, and sustainment of defense systems and software. You will apply security requirements throughout the engineering lifecycle, assess system architectures and vulnerabilities, guide risk reduction, and support Risk Management Framework documentation and authorization activities.

Responsibilities

• Identify cybersecurity requirements from Do
• D policies, NIST publications, DFARS, CMMC, RMF controls, STIGs, program protection, SCRM, and customer requirements.
• Help establish system security boundaries, information flows, interfaces, cybersecurity assumptions, and constraints.
• Participate in system and software architecture development and design reviews; identify weaknesses and recommend risk reductions.
• Provide engineering guidance on authentication, authorization, encryption, key management, logging, secure communications, network segmentation, and data protection.
• Perform or coordinate vulnerability assessments using approved security assessment tools and coordinate remediation recommendations with engineering teams.
• Prepare and maintain RMF artifacts and support authorization approaches such as IATT, ATO, and Assess-Only.

Required Skills

• Do
• D cybersecurity requirements
• NIST SP 800-53
• NIST SP 800-37 RMFNIST SP 800-171
• NIST SP 800-218 SSDFRisk Management Framework (RMF) documentation
• Vulnerability assessment tools (ACAS/Nessus)
• SCAP/STIG assessment tools
• Secure system and software engineering
• Cybersecurity architecture assessment