About the role
Leidos is seeking a junior-level Security Engineer and IT Help Desk Technician to support
the National Digital Exploitation & OSINT Center (NDOC).
This role will be responsible for analyzing and assessing computer/network architecture security requirements and determine optimum, cost-effective solutions. The individual will work effectively with cross-functional teams to define technical requirements and identify and resolve technical design issues. This role will collaborate with client, server and other internal/external teams to identify support and technology advancements to meet current and future security requirements.
This is a 100% on-site position. All work must be performed at the customer site in Bethesda at the Intelligence Community Campus.
Security Engineer Primary Responsibilities:
Apply system security engineering expertise in one or more of the following: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing
Work closely with other systems architects and project managers to develop, plan and implement system enhancements and upgrades to meet security requirements based on STIG and NIST 800.53.
Provide technical support, troubleshooting and complex problem resolution on escalated issues related to security enhancements implemented within the infrastructure.
Ensure that security requirements and objectives are identified, implemented, automatically monitored, automatically reported in compliance with NMEC2 RMF and other security directives as detailed by the NMEC2 ISSM.
Ensure all applicable security requirements are met in accordance with existing and evolving IA reference security documents.
Provide written input to the ISSMs when a security relevant change is required for existing systems or contractors.
Assist the ISSMs in performing systems security requirements analysis where needed in preparation for security compliance and relay findings through the ISSMs that may impact design, operations and/or performance to the relevant engineering or operations groups.
At Government direction, assist ISSMs to enhance and deploy security services architecture.
As directed by the Government, participate in customer Technical Exchange Meetings (TEMs) to gather requirements, and participate in Security TEMs in relation to systems security and system accreditation as required.
Maintain currency on system security documentation (body of evidence) for all accreditation documentation in accordance with all specified National Institute of Standards and Technology (NIST) 800-53 controls for all project and service activities in support of ATO.
Collaborate on IA activities with NMEC2, the ISSMS, and the appropriate Cyber Security Program Offices to ensure incorporation of NMEC2 RMF strategic goals and objectives.
Work with ISSMs to support the ATO within the NMEC and with NMEC IT customers to:
Verify that security measures are taken, maintained, reported on and updated as required
Provide input to IA (via assigned ISSM(s)) assisting ISSM(s) to edit JAVA and POA&M documentation when expected measures have not been implemented
Meet mission objectives in accordance with applicable security policies and directives.
Collaborate with NMEC2 ISSM and Operations & Maintenance to ensure that all systems are compliant with ICD-503 and other security directives as designated by the NMEC2 ISSM to include:
Design/enhancement of firewalls and controlled interface security architectures (based on requirements provided by NMEC2 ISSM and appropriate security organization(s))
Identify, implement, automated management, automated monitoring, and automated reporting of detailed ongoing security hardening, patching, and virus-checking
Implement procedural protective measures, fully automating repeatable processes and reporting to maintain systems compliance toward ATO
Service Desk Responsibilities:
Provide first point of contact for all customer queries and incidents via walkup, phone, email, or chat.
Manage and administer accounts to include account creation, password resets, troubleshooting, and termination/deletion.
Document and track customer requests and incident in the customer’s approved IT Service Management (ITSM) solution.
Properly document initial troubleshooting and triage steps and escalate to Tier 2/3 support teams when appropriate to resolve more complex customer issues.
Provide telephone support to customers in a professional, knowledgeable manner to maintain excellent customer relationships.
Ensure all tickets are logged and assigned to the correct team.
Proactively monitor Incidents for trends and potential Problem Records and highlight these to the Service Desk Manager.
Update Service Desk documentation for new processes and procedures to share best practices, capture changes in the environment, and streamline initial response to common issues to reduce duplication of effort.
Produce both customer-facing and internal knowledge base documentation as required.
Actively participate in Continual Service Improvement Activities to share their experience and knowledge and support service enhancement.
Basic Qualifications
Customer Service Skills: Strong customer service skills are essential for interacting with end-users and addressing their IT-related inquiries and concerns. Candidates should be patient, empathetic, and able to communicate technical information in a clear and understandable manner.
Experience creating and managing domain accounts within Active Directory
Familiarity with supporting virtual desktops running Microsoft Windows
Experience troubleshooting common Active Directory account issues and errors.
Experience troubleshooting software and hardware issues for end user devices to include workstations, printers, and scanners.
Experience with application performance and latency problems related to security requirements from front, middle, and back end
Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, DFS
Experience implementing security controls on common network services such as file, email, and active directory across multiple geographically dispersed sites.
Experience with networking technologies and security assessment to include, but not limited to, STIGs.
Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS
Network and systems troubleshooting experience with TCP/IP, Internet security, and encryption (data at rest, data in transit)
Effective time management skills and ability to work independently and prioritize work efforts based on customer and mission impact.
Ability to utilize an IT Service Management (ITSM) tool to properly document, track, and resolve customer incidents and requests.
Ability to triage and properly classify incidents and prioritize work efforts.
Strong oral and written communications skills
Experience establishing goals and plans that meet project objectives.
Track record of working effectively within a team, and support to peers toward improved processes and results
Thorough knowledge in the use of MS Office, the Internet, and other internal applications necessary to conduct research, complete routine and moderately complex tasks.
Ability to produce clear and concise documents and diagrams capturing networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel and MS Word.
Candidate must, at a minimum, meet DoD 8570.11- IAT Level II certification requirements (currently Security