Title: RMF Security Analyst Location: Odenton, MD time type Full time job requisition id R-00186528 Leidos has an upcoming opportunity for a cyber professional to join our team at Fort Meade in Maryland. This is a hybrid position based primarily on-site, with opportunity for 1-2 remote days per week depending on mission needs. Our recruiting team will contact applicants as positions become available - we expect to begin onboarding in late summer 2026. This position will support the implementation and administration of information security policies, procedures, and technologies to ensure the protection of systems, applications, and data on tactical and development networks. PRIMARY RESPONSIBILITIES: - Support the Assessment and Authorization of DoD systems, software, and networks in accordance with the Risk Management Framework (RMF), utilizing the Enterprise Mission Assurance Support Service (eMASS) system. - Provide professional security services for IA/Cybersecurity in accordance with US Government (USG), Department of Defense (DoD) and National Security Agency (NSA) policies and guidelines. - Provide the necessary support to monitor and ensure compliance with information security policies, procedures and regulatory requirements including assistance with internal auditing, reporting, technical reviews, and identification of security risks.- Assist with drafting, reviewing, editing, and recommending guidance for Standard Operating Procedures (SOP), Tactics, Techniques, & Procedures (TTP), System Security Plans (SSP), Plan Of Action and Milestones (POA&M), and Federal Information Security Management Act (FISMA). - Support the implementation and administration of information security policies, procedures, and technologies to ensure the protection of systems, applications, and data on tactical and development networks by working hand and hand with technical SMEs, systems administrators and engineers. BASIC QUALIFICATIONS: - Active DoD Secret clearance. - Bachelor's Degree in a related discipline as well as professional, directly relevant experience depending on job level (Level II: 2+ years of experience, Level III: 4+ years of experience). Additional years of professional and/or military experience may be substituted in lieu of degree. - Must possess DoD 8140 (formerly 8570) IAT Level II certification (e.g., Security+) prior to start date. PREFERRED QUALIFICATIONS: - Experience with Cross Domain Solutions and Secret and Below Interoperability (SABI) framework, process and implementation - Experience in performing risk assessment, IT audits, security planning, systems accreditation and policy development. - Experience complying with USG, DoD, and DA regulations and preparing for responding to information security audits and questionnaires. - Understanding of related information technology (e.g. firewalls, VPN, virtualization, DLP, etc) and physical security assets. - Knowledge of domain structures, user authentication, data encryption, access audits and end-user security best practices. - Experience with UNIX/LINUX OS and any scripting language. - Experience working with IDS/IPS and processes. #cdes If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares. Pay Range: Pay Range $69,550.00 - $125,725.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

• Partner with system owners to prioritize and coordinate the remediation of security vulnerabilities • Track remediation activities, validate completed fixes, and monitor progress against established deadlines • Hold stakeholders accountable for remediation commitments • Develop and maintain security reports, dashboards, and automation solutions • Create, maintain, and improve security documentation • Assist technical teams in understanding and adhering to security processes • Provide timely and accurate guidance to stakeholders regarding security governance • Identify opportunities to improve vulnerability detection capabilities • Contribute to continuous improvement initiatives

Role Description As a Senior Information Security Analyst on our Security Architecture team, you will play a key role in how StackAdapt secures its technology, systems, and people. Working closely with the Information Security Architect, you will execute the end-to-end security architecture process for a range of initiatives across the business. Engaging with business units, defining security requirements, and ensuring they are implemented effectively. Beyond project work, you'll contribute to the broader InfoSec function: - Support the team's use of security tooling - Help the business with InfoSec queries - Play an active role in how the team adopts and embeds AI into its work This role follows established processes and frameworks, but we're not looking for someone who just executes tasks. We want someone who brings curiosity and initiative. You'll have real autonomy in how you manage your work, with the support and mentorship of the Information Security Architect. You'll thrive in this role if you're someone who enjoys variety, takes pride in producing clear and useful security outputs, and wants to develop into a well-rounded security architect over time. A collaborative mindset, strong communication skills, and a genuine interest in the evolving security landscape, including AI. StackAdapt is a remote-first company. This role is open to candidates in Canada and the US. We will be prioritizing candidates in Eastern time zones. What you'll do: - Execute the security architecture process for business initiatives — including new technology onboarding, tool integrations, and system reconfigurations — from initial engagement through to confirming requirements have been implemented - Engage with project teams and the PMO to understand what is being built or changed, identify the security implications, and produce clear, actionable security requirements - Support the Information Security Architect across their broader remit — contributing to analysis, reviews, and outputs as needed - Develop a strong working knowledge of the team's internal security systems and processes, and identify and drive improvements where opportunities arise - Act as a point of contact for InfoSec queries from across the business, handling requests independently and escalating where appropriate - Use the team's security tooling including SIEM, EDR, CNAPP, vulnerability scanning, email and web security gateways, and AI security tools — to identify and analyse risk areas and support in driving down key risks - Contribute to the team's adoption of AI tools in day-to-day InfoSec work, and support the broader AI security strategy Qualifications - 3–5 years of experience in an Information Security role - An understanding of project security engagement - Ability to produce clear, practical security requirements that technical and non-technical teams can understand and act on - Hands-on experience or familiarity with security common tooling: SIEM, EDR, vulnerability management, or similar platforms - Comfortable working autonomously on a varied workload and managing your own queue of work - Strong communication skills - able to have productive conversations with engineers, product managers, and business stakeholders without being a blocker - A curious, improvement-oriented mindset - Awareness of common security frameworks and standards such as ISO 27001, NIST, SOC 2, or CIS Controls - An interest in AI - both as a tool to improve how security teams work and as an emerging risk area to understand - Understanding risk management: Identifying risks and understanding mitigation strategies Requirements - Experience with cloud security across AWS, GCP, or Azure - Familiarity with third-party or vendor risk assessment processes - Experience contributing to a risk register, audit, or compliance programme - Relevant certifications such as CompTIA Security+, CISSP Associate, CISM, or similar Benefits - Highly competitive salary - Retirement/401K/Pension Savings globally - Competitive Paid time off packages including birthdays off! - Access to a comprehensive mental health care program - Health benefits from day one of employment - Work from home reimbursements - Optional global WeWork membership for those who want a change from their home office and hubs in London and Toronto - Robust training and onboarding program - Coverage and support of personal development initiatives (conferences, courses, books, etc.) - Access to StackAdapt programmatic courses and certifications to support continuous learning - An awesome parental leave program - A friendly, welcoming, and supportive culture - Our social and team events!

• Building strong relationships across HR, Payroll, Benefits, and IT to ensure security aligns with business needs • Acting as a trusted advisor on Workday security best practices • Partnering with stakeholders to support secure and efficient HCM processes • Configuring and maintaining Workday security roles, groups, and domain/business process security policies • Implementing role-based, user-based, intersection, and segment-based security groups • Conducting regular audits and access reviews to ensure compliance and data integrity • Responding to operational security requests and troubleshooting access issues • Validating security configurations during Workday release cycles • Maintaining comprehensive documentation of security policies and audit logs • Ensuring security supports key HCM processes such as hiring, terminations, and benefits enrollment • Aligning security with Canadian HR and payroll compliance requirements • Providing training and guidance to HR analysts and business users • Preparing clear documentation and security guidelines • Presenting recommendations and findings to stakeholders • Facilitating workshops and training sessions on security best practices • Managing deliverables and schedules independently to ensure timely completion of security tasks and audits