Description
Mission One: Land The Job. Mission Two: Outdo What's Next. Come #OutsmartOutdo at Leidos!
Leidos is seeking an experienced a TS/SCI cleared Host-Based Security System (HBSS) Administrator to support the management, configuration, and maintenance of endpoint security infrastructure across Department of Defense (DoD) and federal government networks. The ideal candidate brings hands-on experience with McAfee ePolicy Orchestrator (ePO) and the Trellix Security Platform Suite and operates comfortably within a compliance-driven environment governed by DoD standards. The position requires to perform job duties onsite at Langley Air Force base, VA.
Roles and Responsibilities
Manage, deploy, and maintain HBSS/Trellix endpoint protection technologies across enterprise networks to monitor, detect, and respond to security events.
Configure and fine-tune HBSS modules including Host Intrusion Prevention System (HIPS), Data Loss Prevention (DLP), and Policy Auditor.
Implement and maintain DISA Security Technical Implementation Guides (STIGs) to ensure systems remain audit-ready for command inspections and authorization reviews.
Oversee OS and application patch deployments through McAfee ePO; track vulnerabilities and support Information Assurance (IA) compliance efforts.
Identify and isolate system anomalies; assist with incident response activities and coordinate with engineering and security operations teams to resolve HBSS point-product issues.
Monitor server and network health, generate compliance and exception reports, and brief leadership on system status as required.
Support Authority to Operate (ATO) activities by maintaining accurate system documentation, POA&Ms, and security baselines.
Coordinate with system owners and the ISSM/ISSO to ensure endpoint policies align with organizational security requirements.
Basic Qualifications
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field with 4-8 years of directly applicable experience. Additional years of relevant experience will be considered in lieu of degree.
Must have a DoD TS/SCI Clearance.
Certification: DoD 8570/8140-compliant certification at IAT Level II or higher — CompTIA Security+ CE required at a minimum.
Work will occur at government facilities in the Hampton Roads area. Travel may be required to CONUS and OCONUS locations
Experience: 3–5 years of hands-on experience administering HBSS, McAfee ePO, or the Trellix Security Platform Suite in a DoD or federal government environment, including deployment and management in a predominantly Red Hat Enterprise Linux (RHEL) environment.
Technical Knowledge: Working knowledge of DISA STIGs, NIST SP 800-53, and DoD IA policies and regulations; familiarity with Linux-specific HBSS agent deployment, configuration, and troubleshooting.
System Administration: Proficiency in Red Hat Enterprise Linux (RHEL) administration — including RPM package management, SELinux policy, systemd services, and security baseline configuration — as well as Windows Server administration and OS patching.
Preferred Qualifications
Additional certifications such as CISSP, CISA, CEH, or vendor-specific ePO/Trellix training and certification.
Proficiency in scripting and automation (e.g., Bash, PowerShell, Python)
Experience with Assured Compliance Assessment Solution (ACAS) / Tenable Nessus for vulnerability scanning and remediation tracking.
Familiarity with Security Information and Event Management (SIEM) tools and integration with HBSS/Trellix event data.
Experience supporting RMF Authorization packages, including development of System Security Plans (SSPs) and continuous monitoring activities.
Red Hat certifications such as RHCSA or RHCE, or equivalent demonstrated Linux administration experience in a security-focused role.
Knowledge of scripting (Bash, Python, or PowerShell) for automating HBSS agent deployments, compliance checks, or ePO reporting tasks across mixed OS environments.
Prior experience in a SOC, NOC, or Cyber Defense environment supporting 24/7 operations.
Familiarity with cloud-based endpoint security management or hybrid on-prem/cloud ePO deployments.
#DINM
DABAOPP1
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.
June 11, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected].
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
