Lead, Info Security Systems Engineer

L3Harris•Clifton, NJ

2d•Onsite

About The Position

Applies systems security engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks. Works with customers throughout the system lifecycle to define and implement security protection needs, concerns, and requirements in a sustainable manner that supports security authorization. Collaborates with systems developers and commercial product vendors to design and evaluate secure systems, networks, and database products using encryption technology, vulnerability analysis, and security management. Integrates security methods into a cohesive system security perimeter and environment and implements policies and procedures to monitor and maintain it. Prepares Certification and Accreditation documentation using standards such as DITSCAP, DIACAP, DCID 6/3, Common Criteria, and NIST 800-37, and represents program security needs at customer meetings. The role leads security and privacy control assessments for embedded systems and supports Risk Management Framework accreditation and authorization, including development of standard Body of Evidence packages. It also supports security engineering, security testing and verification, security architecture improvement, obsolescence replacement, vulnerability response, and DoD software selection and approval. Work is performed 100% onsite in a laboratory environment, with no remote-work option.

Requirements

Bachelor’s degree and at least 9 years of prior relevant experience, or a graduate degree and at least 7 years of prior related experience; alternatively, at least 13 years of prior related experience in lieu of a degree.
TS/SCI security clearance.
Ability to obtain and maintain a DoD 8140 certification, or NIST 800-181 certification appropriate for the position, within 6 months of start.
Experience leading programs through RMF accreditation and authorization, including steps 1–4 and standard Body of Evidence package development.
Experience with accreditation of Platform IT (PIT) systems.
Experience configuring and using cyber defense and vulnerability assessment tools such as ACAS and SCC.
Experience with DoD software selection and approval processes for COTS, GOTS, and FOSS.
Experience with security testing and verification.
The role is 100% onsite in a lab environment; remote support is not available.

Nice To Haves

NSA Type 1 certification of cryptographic high-assurance devices.
Experience with NSA High Assurance products and IASRD and SERD requirements.
Experience leading Anti-Tamper development and implementation throughout the system development lifecycle.
Subject-matter expertise in Anti-Tamper.
Experience using DoD 5200.39 to identify and protect critical program information (CPI).
Experience engineering trustworthy and secure systems in accordance with NIST 800-160.
Experience drafting Program Protection Plans (PPPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and Anti-Tamper plans.
Active TS/SCI clearance is highly desired.
Experience as a Control Account Manager (CAM) using Earned Value Management System (EVMS) tools.
Experience as an Integrated Product Team Lead (IPTL).

Responsibilities

Lead assessment activities for security and privacy controls in embedded systems using NIST 800-53.
Lead or support programs through RMF accreditation and authorization processes, including RMF steps 1–4: categorization, control selection, control implementation, and security assessment.
Develop standard Body of Evidence packages and process accreditation and authorization packages.
Support security engineering activities, including basis-of-estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.
Support program security in developing policies and procedures for emerging security technologies.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.
Use cyber defense and vulnerability assessment tools, including ACAS and SCC.
Support DoD software selection and approval processes for COTS, GOTS, and FOSS.
Represent program security needs, concerns, and requirements at customer meetings.
As a preferred area of work, lead development and implementation of Anti-Tamper throughout the system development lifecycle, including CPI assessment, trade studies, requirements development, security architecture implementation, threat assessment, and verification and validation.
Interact with customers to define Anti-Tamper requirements, solutions, trades, costs, implementation, system impacts, and effectiveness.