Information Assurance Security Engineer

at  Leidos

COMMUNICATION AND SOFT SKILLS:

• Excellent verbal and written communication skills and works well in a team environment
• Capable of developing and communicating reports to meet defined objectives for intended audience
• A good level of commercial awareness and project disciplines

CLEARANCE REQUIREMENTS:

This role requires SC clearance to start which we can obtain.

WHAT WE DO FOR YOU:

At Leidos we are PASSIONATE about customer success, UNITED as a team and INSPIRED to make a difference. We offer meaningful and engaging careers, a collaborative culture, and support for your career goals, all while nurturing a healthy work-life balance.

We provide an employment package that attracts, develops and retains only the best in talent. Our reward scheme includes:

• Contributory Pension Scheme
• Private Medical Insurance
• 33 days Annual Leave (including public and privilege holidays)
• Access to Flexible benefits (including life assurance, health schemes, gym memberships, annual buy and sell holidays and a cycle to work scheme)
• Dynamic Working

WHO WE ARE:

Leidos UK & EUROPE – we work to make the world safer, healthier, and more efficient through technology, engineering and science.
Leidos is a growing company delivering innovative technology and solutions focused on safeguarding critical capabilities and transformation in frontline services, our work in the United Kingdom includes addressing some of the most complex problems in defence, healthcare, government, safety and security, and transportation.

THE ROLE:

Leidos have an exciting and challenging opportunity for an Information Assurance Security Engineer to join our expanding Engineering Team. You will be immersed in one of our key programmes, on behalf of one of our high-profile national security clients.

Within this role the successful candidate will be required to provide subject matter expertise in design of Security and Assurance within the Information Security Management (ISM) function, helping to set security strategy, policy and standard operating procedures to ensure stakeholder confidence that risk to the confidentiality, integrity and availability of data in storage and in transit is managed pragmatically, appropriately and in a cost-effective manner.

• Be responsible for the assurance of system designs and infrastructure changes to always maintain adequate levels of information security.
• Perform Information Assurance (IA) Policy & Procedure development, Information Security Audits, advise on cryptographic security including certificate management.
• Co-ordinate Information Security activities within the Account. Maintain the Information Security Policy, Standards, and ISMS documentation in line with legislative compliance requirements and advice from Accreditors.
• Support the maintenance of Risk Management Accreditation Document Sets (RMADS) for the infrastructure.
• Support delivering the service to the contracted level and ensuring Service Level Agreements conformance.
• Support the development and operation of the Information Security Management System (ISMS) for the infrastructure and service.
• Be responsible for the analysis of system security weaknesses and articulate issues to other programme members and department leads.
• Liaise with teams and organisations to ensure the required level of information security is supported by site security and other third-party providers.
• Carry out Information Security risk assessments and maintain the Information Security Risk Register.
• Managing the monthly vulnerability process for the IABS environment, taking appropriate action to ensure that all possible remediation or mitigation measures are implemented and recorded.
• Making sure all planned security activities are recorded on the Security PoaP which is sent to service before the beginning of each month. This is combined with information regarding all vulnerabilities and patching plans for the month.
• Attend the weekly Security Working Group (SWG) and address any actions/issues which are related.
• Scope, coordinate and deliver the annual ITHC (IT Health Check) and all subsequent remediation plans and ensure that remediation efforts are tracked and recorded and reported within the SWG