Job DescriptionThe mission of the DHS Chief Information Security Officer Directorate (DHS CISOD) is to support the Department’s implementation of all applicable regulatory requirements—including the Federal Information Security Modernization Act (FISMA), relevant OMB circulars, Executive Orders, Federal laws, directives, policies, and regulations—while providing the Department of Homeland Security (DHS) a secure and trusted computing environment. Information security is an essential business function, critical to enabling DHS to conduct its operations and deliver service to the public.Leidos is seeking an experienced Senior High-Value Asset (HVA) Assessor to join our team on a highly visible and strategic Cybersecurity Assessments contract. The assessor will lead and execute comprehensive HVA assessments in strict alignment with CISA Assessment Evaluation and Standardization (AES) guidelines and the DHS HVA Program Management Office (PMO).Primary Responsibilities<ul><li>Lead end-to-end execution of Non-Tier 1 HVA assessments—including planning, onsite/remote execution, and close-out—ensuring compliance with CISA AES methodology.</li><li>Serve as Assessment Lead or Technical Lead; coordinate assessment teams (operators, SMEs) and assign roles to meet project objectives and deadlines.</li><li>Maintain personal AES-HVA Assessor certification by passing the required multiple-choice examination and report-writing evaluation, and by participating in at least one assessment per year; ensure team members do the same.</li><li>Develop and deliver detailed assessment reports within 30 days of out-brief, clearly articulating findings, risk impacts, and prioritized recommendations.</li><li>Create, refine, and publish Standard Operating Procedures (SOPs), best practices, templates, and training materials; maintain these in corporate and DHS knowledge repositories.</li><li>Produce and update an enterprise-wide HVA assessment schedule; track staff qualifications and monthly assessment metrics for reporting to the DHS HVA PMO.</li><li>Coordinate with stakeholders to gather pre-assessment artifacts, provide advance preparation guidance, and manage logistics for assessment engagements.</li><li>Manage an electronic repository on the DHS network for all HVA artifacts, ensuring secure storage, version control, and ease of retrieval.</li><li>Mentor and train newly onboarded assessors on AES methodology, CISA tools, and DHS operating environments.</li><li>Support continuous improvement by recommending updates to HVA evaluation methods, categorization processes, and tool configurations.</li></ul>Basic Qualifications<ul><li>Education / Experience<ul><li>Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field and 8+ years of hands-on information-security or cybersecurity-assessment experience OR</li><li>Master’s degree in a related field and 6+ years of relevant experience.</li></ul></li><li>Active AES-HVA certification (or ability to obtain within 90 days) and demonstrated success in both the multiple-choice and report-writing components.</li><li>Experience leading or co-leading HVA, security control assessments, or similar security assessments in large Federal or enterprise environments.</li><li>Deep knowledge of NIST SP 800-53, SP 800-60, CSF, and other Federal cybersecurity guidance; familiarity with FISMA reporting requirements.</li><li>Strong analytical skills for identifying vulnerabilities, correlating technical data, and prioritizing remediation actions.</li><li>Proven ability to write clear, technically sound reports and deliver executive-level briefings.</li><li>Ability to obtain and maintain a DHS Suitability/Public Trust Clearance/EOD</li></ul>Preferred Qualifications<ul><li>Prior DHS or other Federal agency cybersecurity-assessment experience.</li><li>Industry certifications such as CISSP, CISM, CISA, GIAC (GXPN/GWAPT/GSEC), or CompTIA Security+.</li><li>Working knowledge of common enterprise operating systems (Windows, Linux, z/OS), networking protocols, and security-monitoring tools (e.g., Splunk, Nessus, Qualys).</li><li>Experience developing SOPs, training curricula, or knowledge-management repositories for cybersecurity programs.</li><li>Demonstrated success managing geographically dispersed assessment teams and multiple concurrent engagements.</li></ul>Come break things (in a good way). Then build them smarter.Were the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”<h2></h2><h2></h2><h2>Original Posting:</h2>August 14, 2025For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2>Pay Range:</h2>Pay Range $104,650.00 - $189,175.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos Holdings

Senior High-Value Asset (HVA) Assessor Springfield, VA

Leidos Holdings