Security Engineer / IT Help Desk Technician

Leidos provides mission-critical services and technologies to government and commercial customers. The Junior Security Engineer / IT Help Desk Technician will support the National Digital Exploitation & OSINT Center by assessing and implementing security requirements, troubleshooting infrastructure issues, supporting authorization and accreditation activities, and delivering customer-facing service desk support.

What you'll do:

• Apply system security engineering expertise in one or more of the following: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government-off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing
• Work closely with other systems architects and project managers to develop, plan and implement system enhancements and upgrades to meet security requirements based on STIG and NIST 800.53
• Provide technical support, troubleshooting and complex problem resolution on escalated issues related to security enhancements implemented within the infrastructure
• Ensure that security requirements and objectives are identified, implemented, automatically monitored, automatically reported in compliance with NMEC2 RMF and other security directives as detailed by the NMEC2 ISSM
• Ensure all applicable security requirements are met in accordance with existing and evolving IA reference security documents
• Provide written input to the ISSMs when a security relevant change is required for existing systems or contractors
• Assist the ISSMs in performing systems security requirements analysis where needed in preparation for security compliance and relay findings through the ISSMs that may impact design, operations and/or performance to the relevant engineering or operations groups
• At Government direction, assist ISSMs to enhance and deploy security services architecture
• As directed by the Government, participate in customer Technical Exchange Meetings (TEMs) to gather requirements, and participate in Security TEMs in relation to systems security and system accreditation as required
• Maintain currency on system security documentation (body of evidence) for all accreditation documentation in accordance with all specified National Institute of Standards and Technology (NIST) 800-53 controls for all project and service activities in support of ATO
• Collaborate on IA activities with NMEC2, the ISSMS, and the appropriate Cyber Security Program Offices to ensure incorporation of NMEC2 RMF strategic goals and objectives
• Work with ISSMs to support the ATO within the NMEC and with NMEC IT customers to:

What they're looking for:

• Customer Service Skills: Strong customer service skills are essential for interacting with end-users and addressing their IT-related inquiries and concerns. Candidates should be patient, empathetic, and able to communicate technical information in a clear and understandable manner
• Experience creating and managing domain accounts within Active Directory
• Familiarity with supporting virtual desktops running Microsoft Windows
• Experience troubleshooting common Active Directory account issues and errors
• Experience troubleshooting software and hardware issues for end user devices to include workstations, printers, and scanners
• Experience with application performance and latency problems related to security requirements from front, middle, and back end
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, DFS
• Experience implementing security controls on common network services such as file, email, and active directory across multiple geographically dispersed sites
• Experience with networking technologies and security assessment to include, but not limited to, STIGs
• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS
• Network and systems troubleshooting experience with TCP/IP, Internet security, and encryption (data at rest, data in transit)
• Effective time management skills and ability to work independently and prioritize work efforts based on customer and mission impact