HBSS Administrator

Description

Leidos is seeking a skilled Senior HBSS Administrator in Fort Belvoir, VA to join the I3TS team supporting DTRA. The I3TS program provides enterprise-wide IT support to enable DTRA's Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA's internal and external mission partners operating in CONUS and OCONUS locations. The candidate will be responsible for ensuring the security and integrity of IT systems by running their Endpoint Security with experience in Trellix and Microsoft Defender. Administrator will also be responsible in applying Security Technical Implementation Guides (STIGs), managing system patches, and overseeing vulnerability management processes. This role supports federal clients in maintaining compliance with the Department of Defense (DoD) and other federal cybersecurity standards.

The candidate will be responsible for identifying points of vulnerability, non-compliance with established Information Assurance (IA) guidelines and regulations and recommend mitigation strategies, along with assisting users as needed in a classified computing environment. The selected candidate must be able to work independently as well as with a team of IT analysts, administrators, and engineers. The position requires excellent communications skills, both verbal and written. The candidate must be able to work in a high-energy environment and adapt to shifting priorities.

**Must possess an active DoD TS/SCI Clearance at time of consideration**

Key Responsibilities:

• Continuous upkeep, monitoring, analysis, and response to Information System, network and security events using Endpoint Security tools such as Trellix and Microsoft Defender.

STIG Application and Compliance:

• Implement and maintain Security Technical Implementation Guides (STIGs) on Endpoint Security Tools.

• Conduct regular STIG compliance checks using tools like SCAP Compliance Checker and STIG Viewer.

• Document STIG configurations and remediation actions to ensure audit readiness.

Patching and System Updates:

• Manage and deploy operating systems and application patches in accordance with federal patch management policies.

• Coordinate patch schedules to minimize operational impact while meeting compliance deadlines.

• Verify patch deployment success and troubleshoot any issues arising from updates.

System Hardening:

• Harden systems by applying best practices and federal security guidelines to reduce attack surfaces.

• Maintain configuration baselines and ensure systems adhere to DoD and NIST standards.

Incident Response Support:

• Participates in internal/external security audits/inspections; performs risk assessments and Continuous Monitoring.

• Assist in identifying and responding to security incidents related to vulnerabilities or misconfigurations.

• Document incidents and contribute to after-action reports for continuous improvement.

Collaboration and Reporting:

• Work closely with system administrators, engineering staff, and compliance teams to ensure cohesive security operations.

• Prepare detailed reports and briefings for federal clients on STIG compliance, patching status, and vulnerability management efforts.

• Develop, implement and enforce Information Security Policies and Procedures.

Tool Utilization:

• Trellix and Microsoft Defender.

Basic Qualifications:

• BS bachelor's degree with 8-12 years' experience or 6-10 years of IA experience without a degree. Specific experience, education and training may be considered in lieu of degree.

• A Current DoD 8570 baseline certification

• HBSS 301 Certification

• Understanding of the Risk Management Framework (RMF), NIST, ICD, and CNSS standards.

• Familiarity with network technologies (LAN & WAN) and best practices within a classified environment to include crypto and key management

• STIG compliance, SCC and STIG Viewer experience, and ACAS expertise.

• Expert with Microsoft Windows, Linux, and system virtualization in a secure network environment.

• Must be able to work in a constantly changing regulatory environment with short-, mid-, and long-term timelines for remediating any non-compliance

• Must be able to work well within a team environment and able to adapt quickly to change

• Good writing and verbal presentation skills

• Must possess an active DoD TS/SCI Clearance at time of consideration.

Preferred Qualifications:

• Security+ or CISSP or equivalent

• DoD IS knowledge and experience

• Security hardening scripting/automation experience

• Ansible and or MECM experience

• Microsoft OS Certification (MCSE Win 7 or other)

• Linux certification (RHCSA, CompTIA Linux, LCFS/LCFE, etc.)

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

#Featuredjob