Leidos’ AEGIS program is seeking an Information Systems Security Engineer to support advanced cybersecurity engineering for NASA Advanced Supercomputing (NAS) systems and HPC environments. The position focuses on system security planning, compliance execution, and senior technical leadership across complex, performance-critical compute infrastructures.
Location
Mountain View, CA (onsite)
Salary
USD 131,300 - 237,350 per year
Role Summary
As an Information Systems Security Engineer, you will lead and oversee development and maintenance of System Security Plans (SSPs) and security compliance activities. This includes A&A support, vulnerability assessments, POA&M remediation, and HPC-specific security guidance tailored to large-scale simulation workloads, mission operations, and research productivity.
Key Responsibilities
- Ensure compliance and integrity of SSPs and related security artifacts with NASA and U.S. Government requirements, including NPR 2810.1F, NIST 800-53/53B, FISMA, and NIST HPC Security Overlay guidance.
- Act as a senior technical advisor to internal and external stakeholders on advanced HPC security challenges, including system hardening for MPI-based workloads, GPU/accelerator nodes, and high-speed fabrics such as InfiniBand and Slingshot, as well as performance-critical parallel filesystems.
- Evaluate and recommend advanced security solutions that balance high-performance computing capabilities with strong cybersecurity protections.
- Lead analysis and reporting of HPC-specific security data, including vulnerability assessments, risk evaluations, security telemetry, and compliance findings, with actionable recommendations to Division and Branch leadership.
- Oversee development, tracking, and remediation of Plans of Action and Milestones (POA&Ms) across HPC systems, coordinating resolution efforts with systems engineering, networking, storage, and operations teams.
- Conduct complex compliance assessments of large-scale HPC environments, assessing high-speed interconnect configurations, MPI-node exposure risks, GPU driver-level vulnerabilities, and HPC authentication and authorization workflows; present findings to NAS leadership.
- Provide technical leadership and coordination to implement, enforce, and maintain compliance with Government cybersecurity policies, including NPR 2810.1F, NIST 800-53/800-53B, NIST SP 800-234, DHS directives, FIPS standards, OMB guidance, and FISMA requirements.
- Coordinate senior technical expertise during NASA Assessment and Authorization (A&A) activities, including data calls, technical evaluation support, control inheritance definitions, and documentation updates.
- Lead credentialed and performance-aware vulnerability assessments across HPC environments, ensuring scanning methodologies accommodate GPU nodes, high-speed fabrics, and parallel filesystems without impacting mission-critical workloads; provide risk-based recommendations to NAS leadership and Information System Security Officials (ISSOs).
- Evaluate and escalate potential or actual HPC security incidents and support investigations with the NASA Security Operations Center (SOC), Incident Response Teams, and NAS Management.
- Lead technical Root Cause Analysis (RCA) efforts for complex HPC security issues, including system performance anomalies, distributed job failures, and vulnerabilities affecting parallel computing environments.
- Provide technical guidance for developing and refining cybersecurity policies, procedures, and guidelines for HPC computational, storage, networking, and data-analysis systems to maintain NASA and federal security compliance.
- Maintain HPC cybersecurity expertise by evaluating emerging threats, technologies, and advisories from NASA, NIST, DOE, and industry sources; advise facility staff on HPC-specific risks including accelerator vulnerabilities, MPI/RDMA protocol threats, and job-scheduler exploitation vectors.
- Provide senior coordination and oversight of security compliance activities related to Section 508, Supply Chain Risk Management (SCRM), IPv6 adoption, and cybersecurity reviews for HPC IT acquisitions, including compute clusters, interconnects, accelerators, and data-storage hardware.
- Lead complex vulnerability assessments and contribute to the design and enhancement of intrusion detection tools supporting advanced network architectures for HPC environments.
Required Qualifications
- Bachelor’s degree and a minimum of 12 years of relevant experience in cybersecurity, information systems security, or a related technical discipline.
- Demonstrated experience managing complex technical projects, coordinating cross-functional activities, and executing cybersecurity initiatives.
- Advanced knowledge of cybersecurity principles, security frameworks, risk management, and compliance requirements in complex IT environments.
- Proven ability to prioritize, delegate, and oversee multiple concurrent projects while meeting technical requirements and timelines.
- Ability to provide technical leadership, mentor and develop team members, and coordinate workforce activities to achieve program objectives.
- Strong analytical, problem-solving, and decision-making skills for evaluating complex technical challenges and recommending solutions.
- Excellent collaboration and communication skills across multidisciplinary teams and with technical stakeholders and leadership.
- U.S. Citizenship required.
- Must be able to obtain and maintain a security clearance ranging from Public Trust, at minimum, up to Top Secret, as required.
Relevant Technologies and Standards
- NPR 2810.1F
- NIST 800-53
- NIST 800-53B
- NIST SP 800-234 (HPC Security Overlay)
- FISMA
- InfiniBand
- Slingshot
- MPI
- RDMA
- GPU/accelerator nodes
- Section 508
- Supply Chain Risk Management (SCRM)
- IPv6
- FIPS standards
- OMB guidance
Benefits
- Health and Wellness programs
- Income Protection
- Paid Leave and Retirement
Pay Range Details
Pay Range: $131,300.00 - $237,350.00
Posting Information
Original Posting: October 21, 2026
For U.S. positions: subject to change based on business needs. Reasonably anticipates the requisition will remain open for at least 3 days with an anticipated close date no earlier than 3 days after the original posting date listed above.
Securing Your Data
- Leidos will never ask you to provide payment-related information during any part of the employment application process (for example, asking for money).
- Leidos will never advance money as part of the hiring process (for example, sending a check or money order before any work is performed).
- Leidos will only communicate through emails generated by the Leidos.com automated system, never via free commercial services (such as Gmail, Yahoo, Hotmail) or through WhatsApp, Telegram, etc.
- If you receive an email purporting to be from Leidos requesting payment-related information or other personal information, email LeidosCareersFraud@leidos.com.
