Senior ISSO Security Manager

Description

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. Are you ready for your next career challenge? The Digital Modernization Sector is focused on delivering performance-based IT services and repeatable solutions. Our team is solving the world's toughest security challenges for customers with "can't fail" missions.

The Digital Modernization Sector at Leidos currently has an opening for a Senior ISSO/Security Manager to work in our Baltimore, Maryland office. This is an exciting opportunity to use your experience helping the Center for Medicare and Medicaid (CMS) program operate, maintain, modernize and transform its legacy system.

Primary Responsibilities:

The Senior ISSO/Security Manager for a large CRM modernization effort which includes overseeing compliance with the CMS information security guidelines, requirements and the Federal Government's Risk Management Framework. This candidate must be well versed in adequate security tools, and its secure integration within the customer environment.

• Facilitate communication and collaboration between different stakeholders to ensure a shared understanding of security requirements, addressing questions or concerns.

• Evaluating and interpreting business needs to create solutions that align with organizational goals and facilitate communication between stakeholders and technical teams.

• Perform analysis of security related SLA/TPM/KPI metrics for reporting and delivery.

• Effectively troubleshoot and prioritize needs, requirements and other issues.

• Manage security-related activities required for development and operations including ATO and table-top tests.

• Discuss with the user's issues such as computer data access requirements, security violations and changes required in programs.

• Analyze and modify the plans, procedures and measures related to the information security of the enterprise.

• Identify the core and essential underneath reasons, principles or facts of the data by segregating the data in hand.

• Oversee events and processes related to the information system are in accordance with the law, standards and regulations.

• Coordinate the execution of the computer plan with concerned personnel and outside vendor.

• Analyze control access protocol to data files and ensure adequate security controls are enforced.

• Perform risk evaluation of the data and conduct tests of the information processing system to make sure that the data in hand is authentic and relevant.

• Analyze Security logs and take appropriate actions as necessary.

Basic Qualifications:

• Bachelor's degree and in Computer science or related field and minimum 8 - 10 years of relevant prior experience

• Ability to obtain Public Trust

• Knowledge of information security or related field, computer network penetration testing and techniques.

• Understand firewalls, proxies, SIEM, antivirus, and IDPS concepts.

• Understand secure design and implementation in public cloud environments and COTS products

• Must have at least 5 years of experience using tools to support IAVA management.

• Must have at least 5 years of experience using tools to support the preparation, maintenance, and management of SSPs and other security related documentation.

• Experience supervising teams or leading teams.

Preferred Qualifications:

• Extensive experience as an ISSO on large software development / integration programs

• CISSP

• Experience with CMS or HHS

Come break things (in a good way). Then build them smarter.

We're the tech company everyone calls when things get weird. We don't wear capes (they're a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for "how it's always been done."

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

#Remote