Computer Network Defense (CND) Security Engineer

$101,400 - $183,300/Yr

Leidos - Suitland, MD

Full-time

Suitland, MD

Professional, Scientific, and Technical Services

About the position

The Computer Network Defense (CND) Security Engineer at Leidos Defense will provide critical operations, engineering, technical, and program management services to support cyber-related requirements at the National Maritime Intelligence Center. This role involves working independently and as part of a team to secure and monitor IT capabilities against various threats, utilizing advanced technologies and tools.

Responsibilities

• Perform overall analysis and monitor Threat Events in McAfee/Trellix ePO, Splunk Enterprise, Palo Alto Firewall/IDPS, and RSA Authentication Manager.
• Analyze and investigate endpoint alerts including malware, virus, rogue system detection, and removable media.
• Create and utilize Splunk Dashboards to visualize and investigate program data.
• Conduct regular ACAS scans on program systems.
• Research emerging technologies and assess their technical and performance characteristics.
• Develop and maintain documentation for projects and systems, including Requirements and Design Documents, Implementation Plans, and Risk Management Framework Documentation.
• Perform general system administration tasks, including applying and updating STIGs, running SCAP benchmark scans, and managing OS and application patching.

Requirements

• A current DoD Top Secret/SCI security clearance.
• Active IAT Level II DoD Approved 8570 Baseline Certification (e.g., Security+ CE) or the ability to obtain within 30 days from offer acceptance.
• Bachelor's degree with 8+ years of experience or Master's degree with 6+ years of experience.
• 3+ years of experience in the CND discipline.
• Experience in design, development, integration, implementation, operation, and analysis of cyber security technologies used within the DoD and IC.
• Knowledge of federal cyber security initiatives.
• Experience with vulnerability management and assessment technologies such as McAfee/Trellix ePO and Splunk.
• Experience in conducting vulnerability assessments using Tenable (ACAS) and SCAP benchmark scans.

Nice-to-haves

• VMware ESXI experience.
• Nessus Tenable Vulnerability Management Tool experience.
• Expert knowledge of ACAS Scanning.

Benefits

• Additional Paid Time Off or a Sign-on Bonus.