网络安全分析师
Cybersecurity Analyst
Leidos正在寻找一位注重细节的网络安全分析师，具备安全认证方面的专业知识，以支持信息系统的评估、授权和持续监控。成功候选人将确保系统符合政府和行业的网络安全要求，同时支持组织的风险管理框架（RMF）流程。
主要职责：
- 领导并支持信息系统的安全认证流程。
- 编制、维护和审查安全授权文件包。
- 根据RMF和适用的安全标准进行安全控制评估。
- 与系统负责人、工程师和相关方协作，实施安全控制措施。
- 执行安全风险评估并推荐缓解策略。
- 监控系统对网络安全政策和标准的合规情况。
- 维护行动计划和里程碑（POA&Ms），跟踪整改活动。
- 支持持续监控工作，包括漏洞管理和安全报告。
- 准备评估与授权（A&A）活动的文档。
- 参与内部和外部网络安全审计。
- 跟踪网络安全威胁、法规要求和最佳实践。
基本要求：
- 网络安全、信息技术、计算机科学或相关领域的学士学位（或同等经验）。
- 3–7年网络安全、信息保障或安全合规方面的工作经验。
- 具有实施或支持NIST风险管理框架（RMF）的经验。
- 熟悉：
- NIST SP 800-37
- NIST SP 800-53
- NIST SP 800-171
- FISMA
- FedRAMP（优先）
- 使用过漏洞评估工具，如Tenable、Nessus或ACAS。
- 对安全控制、风险评估和合规文档有深入理解。
- 优秀的书面和口头沟通能力。
- 优秀的书面和口头沟通能力。
- 拥有以下任一信息安全认证：
- CISSP
- CISM
- Security+
- CAP（认证授权专业人员）
- CGRC（治理、风险与合规认证）
- CEH
- 能够获得机密级别安全许可。
优先条件：
- 持有有效的机密级别安全许可
- 熟悉云安全（AWS、Azure或Google Cloud）。
- 有支持持续监控项目的经验
- 熟悉风险管理框架（RMF）
查看英文原文
Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization's Risk Management Framework (RMF) processes.
Primary Responsibilities:
- Lead and support the security accreditation process for information systems.
- Develop, maintain, and review security authorization packages.
- Conduct security control assessments in accordance with RMF and applicable security standards.
- Collaborate with system owners, engineers, and stakeholders to implement security controls.
- Perform security risk assessments and recommend mitigation strategies.
- Monitor systems for compliance with cybersecurity policies and standards.
- Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities.
- Support continuous monitoring activities, including vulnerability management and security reporting.
- Prepare documentation for Assessment & Authorization (A&A) activities.
- Participate in internal and external cybersecurity audits.
- Stay current on cybersecurity threats, regulatory requirements, and best practices.
Basic Qualifications:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
- 3–7 years of experience in cybersecurity, information assurance, or security compliance.
- Experience implementing or supporting the NIST Risk Management Framework (RMF).
- Knowledge of:
- NIST SP 800-37
- NIST SP 800-53
- NIST SP 800-171
- FISMA
- FedRAMP (preferred)
- Experience with vulnerability assessment tools such as Tenable, Nessus, or ACAS.
- Strong understanding of security controls, risk assessment, and compliance documentation.
- Excellent written and verbal communication skills.
- Excellent communication skills both written and oral.
- At least one of the following Information Security Certifications:
- CISSP
- CISM
- Security+
- CAP (Certified Authorization Professional)
- CGRC (Certified in Governance, Risk and Compliance)
- CEH
- Ability to obtain a Secret level Security Clearance.
Preferred Qualifications:
- Active Secret clearance
- Familiarity with cloud security (AWS, Azure, or Google Cloud).
- Experience supporting continuous monitoring programs
- Risk Management Framework (RMF) knowledge/experience
- Security Accreditation & Authorization (A&A) knowledge/experience
- NIST Cybersecurity Framework knowledge/experience
- Vulnerability Management knowledge/experience
- Security Compliance knowledge/experience
- Risk Assessment knowledge/experience
- Incident Response fundamentals knowledge/experience
- Security Documentation knowledge/experience
- Microsoft Windows & Linux administration knowledge/experience
Remote Interview / Identification Notice
**** Please be advised that during the interview, you will be required to keep your camera on, and your interviewer will be taking your picture for identification purposes if an offer letter is extended to you.
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.
Original Posting:
September 24, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:
Pay Range $69,550.00 - $125,725.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Originally posted on Himalayas