Information Systems Security Engineer – SME

Leidos

. Design, develop, and implement secure information systems supporting mission operations .

Posted 10/14/2026full-timeUnited StatesSeniorLead💰 $154,050 - $278,475 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure information systems, integrating security controls into DevSecOps pipelines, and conducting vulnerability assessments. Proficient in managing cybersecurity compliance and risk management frameworks while collaborating with cross-functional teams.

Highest-signal resume keywords

Vulnerability ScanningDevSecOps IntegrationCybersecurity AuditingRisk Management Framework (RMF)Active TS/SCI Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

System Security EngineeringVulnerability AssessmentIncident HandlingConfiguration ManagementChange ControlThreat Intelligence AnalysisSecurity Documentation ReviewCybersecurity Compliance AuditingSecurity Control IntegrationRisk-Based Recommendations

Soft Skills

CollaborationCommunicationProblem-Solving

Tools & Technologies

SIEM ToolsAWS InspectorTenable Security CenterRapid7 NexposeSonarQubeFortifySplunkOWASP Security ToolsCloud Platforms (AWS, Oracle Cloud, GCP)

Certifications & Qualifications

CISSPSplunkNetwork+Security+OSCPCEHCASP+ISEEP

Industry Keywords

CybersecurityInformation SecurityCompliance StandardsVulnerability ManagementIncident ResponseThreat AssessmentSecurity PoliciesConfiguration BaselinesContinuous Integration/Continuous Deployment (CI/CD)Security Controls

Tech Stack

Tools & technologies

AWSCloudCyber SecurityGoogle Cloud PlatformOracleSplunkTypeScript

About the role

Key responsibilities & impact

Design, develop, and implement secure information systems supporting mission operations
Collaborate with ISSMs, software developers, systems engineers, and government stakeholders
Integrate security controls and ensure systems remain resilient against evolving threats and vulnerabilities
Install, configure, and maintain security scanning and monitoring tools
Conduct vulnerability assessments and review scan results to identify and remediate security risks
Integrate security tools and controls into DevSecOps CI/CD pipelines
Apply system security engineering principles across security design, lifecycle engineering, authentication, authorization, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control
Conduct or support technical cybersecurity assessments and security audits
Coordinate with cybersecurity personnel and recommend mitigation strategies
Identify system vulnerabilities and non-compliance with cybersecurity standards and regulatory requirements
Perform vulnerability scans and generate reports detailing findings and remediation progress
Collaborate with DevSecOps teams on vulnerability remediation
Support RMF authorization and ATO activities by reviewing security documentation and providing risk-based recommendations
Manage and track POA&Ms for customer-sponsored systems
Coordinate with ISSOs, ISSEs, ISSMs, and SCAs

Requirements

What you’ll need

MS degree and 15 or more years of prior relevant experience; additional years of experience may be substituted in lieu of a degree
Must have an active TS/SCI with a Polygraph
Experience conducting routine vulnerability scanning, providing formal and informal reports to technical teams, and tracking remediation activities
Experience reviewing security bulletins, threat intelligence, and vulnerability advisories
Experience monitoring system and network security using SIEM tools
Experience investigating and responding to cybersecurity incidents
Experience tracking CVEs and mapping them to internal controls and remediation strategies
Experience auditing systems for compliance with secure configuration baselines and cybersecurity policies
Experience using at least two vulnerability scanning tools, such as AWS Inspector, Tenable Security Center, Rapid7 Nexpose, SonarQube, Fortify, or OWASP security tools
At least 1 certification: CISSP, Splunk, Network+, Security+, OSCP, CEH, CASP+, or ISSEP
Preferred: Experience with DAST and SAST tools
Preferred: Experience using Splunk, including creating dashboards and security monitoring visualizations
Preferred: Familiarity with AWS, Oracle Cloud, or GCP

Benefits

Comp & perks

Paid Time Off
11 paid Holidays
401K with a 6% company match and immediate vesting
Flexible Schedules
Discounted Stock Purchase Plans
Technical Upskilling
Education and Training Support
Parental Paid Leave