Cybersecurity Policy Consultant

Cybersecurity Analyst
Make an Impact with Leidos
At Leidos, we deliver innovative solutions through the dedication of our diverse and talented teams. United by a shared commitment to our customers’ success, we empower our people, support our communities, and operate sustainably. Our Mission, Vision, and Values guide every aspect of our work, ensuring we do the right thing—for our customers, our people, and the world around us.
The Leidos Defense Sector provides advanced systems, solutions, and services across land, sea, air, space, and cyberspace. From enterprise IT and large‑scale intelligence systems to cybersecurity, geospatial analytics, logistics, and training, we support some of the nation’s most critical defense missions. We are seeking an experienced Cybersecurity Analyst to join our team in Orlando, FL, supporting the Department of the Air Force (DAF) Battle Network and its supporting infrastructure. On this mission, we help the DAF field and operate its digital infrastructure. You will contribute to both day-to-day cybersecurity operations and the long-term strategic maturation of complex, mission-critical systems.
This is an on-site role that requires daily presence at our Orlando, FL office.
As a Cybersecurity Analyst, you will develop multiple Risk Management Framework (RMF) Assessment and Authorization (A&A) packages. This includes documenting security controls, building a system scanning plan, maintaining Plans of Action and Milestones (POA&Ms), and assembling a Body of Evidence that validates control implementation. Plan and document the security of a complex, mission-critical defense network in accordance with the DoD RMF
Plan, document, and obtain authorizations and approvals required by the Government Authorizing Official, including Interim Authorization to Test (IATT), Interim Authorization to Operate (IATO), Authorization to Operate (ATO), Authorization to Connect (ATC), and Interconnection Security Agreements (ISAs)
Perform and review security assessments of computing environments to identify vulnerabilities and non-compliance with cybersecurity standards and regulations, and recommend mitigation strategies
Validate and verify system security requirements definitions and analysis
Analyze findings, prioritize risks, and track remediation to closure
Partner with architects and system developers to identify and implement security functionality that ensures consistent application of security policies and solutions
Assess Sensitive Compartmented Information (SCI) system threats and risks, and develop mitigations throughout the program life cycle
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for SCI systems and classified network operations
Bachelor’s degree with
US Citizen; Experience applying the NIST Risk Management Framework (RMF) within DoD and Intelligence Community (IC) environments
Experience with Intelligence Community Directive (ICD) 503
Experience developing and documenting NIST SP 800-53 security controls
Experience working in a Sensitive Compartmented Information Facility (SCIF) and on classified networks
Excellent written and verbal communication skills, including the demonstrated ability to brief technical and non-technical customers and stakeholders
Experience with Security Onion for network security monitoring (NSM)
At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.