Journeyman Information Systems Security Specialist

Leidos Digital Modernization Sector is looking for a Journeyman Information Systems Security Specialist to work on the Army Global Unified Network (AGUN) – Increment 1 (INC1) program. The Global Enterprise Network Modernization – OCONUS (GENM-O) is a critical mission provider responsible for keeping the Army connected through global network modernization projects. The Army Global Unified Network (AGUN) - Increment 1 (INC1) will unify the next generation of Army transport to comply with the Joint Regional Security Stack (JRSS) divestiture mandate. A phased systematic approach is required to provide individual sites with standardized, updated technology systems to ensure the Army’s Information Technology (IT) infrastructure is equipped to provide soldiers with cutting-edge technology to ensure applications, data, and enterprise services are accessible, trusted, and interoperable across the globe.

Possesses and applies expertise on multiple complex work assignments. Assignments may be broad in nature, requiring originality and innovation in determining how to accomplish tasks. Operates with appreciable latitude in developing methodology and presenting solutions to problems. Contributes to deliverables and performance metrics where applicable.

Primary Responsibilities:

• Responsible for the information assurance, accreditation, and compliance of the AGUN implementation.
• Manages and provides full accreditation support for to meet Department of Defense (DoD) Cybersecurity policies including Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and Federal Information Processing Standards (FIPS).
• Conducts studies and analysis of proposed operations modifications, identifies and documents alternative operations solutions, develops strategic and tactical plans, strategies, and standards. Assists with development and maintenance of the System Security Engineering Plan, Cybersecurity Plan, Security assessment Report, operating procedures, Plan of Action and Milestones (POA&Ms), Risk Assessment Report, and all associated artifacts required to obtain accreditation.
• Develops and continuously updates the cybersecurity strategy for the program, considering long term and short-term strategies.
• Provides management of resources and ensures schedules are met to achieve accreditation.
• Maintains the continuous control and accountability of hardware, software, and artifacts on classified systems.
• Assists the Government with developing and maintaining security incident cleanup plans, sanitization, and data extraction programs for media, test plans, and protections measures.
• Utilizes a comprehensive Risk Management Framework (RMF) framework that enables their cyber security management to make accurate risk-based decisions on where to focus resources for tactical and strategic cyber security operations.
• Provides recommendations for prioritization of audit findings based on highest potential impact and risk to the organization.
• Performs periodic risk assessment activities and recommends courses of action that minimize risk while meeting cyber security controls per the categorization of the system.
• Performs periodic reviews of Government cybersecurity policies and provides recommendations for enhancements based on federal compliance mandates and current and emerging cybersecurity threats and trends.
• Performs review of security controls, configurations, and architectures and provides recommendations of where to focus efforts to mitigate the most risk to the organization.
• Performs authorization and accreditation (A&A) activities and interfaces with Government independent A&A team to ensure all systems are certified and accredited and have the proper security controls required for their sensitivity and classification level.
• Leverages Leidos’ Risk and Privacy Management Acceleration Playbook (RAPMAP) to assist with managing and executing A&A activities.
• Ensures AGUN team safeguards Government data according to Cybersecurity Maturity Model Certification (CMMC) and DoD standards.
• Provides technical and programmatic Information Assurance (IA) services to safeguard and encrypt all DoD emails to conduct regular correspondence and send products that are related to projects and Government day-to-day operations.
• Assess compliance with relevant NIST and DoD standards for STIG and patch compliance.
• Authors and maintains Standard Operating Procedures (SOPs), policies, and appropriate patch/security documentation including policies detailing patch and security update processes and procedures.
• Serves