Lead, Info Security Systems Engineer

L3Harris Technologies•Clifton, NJ

3d•$125,000 - $232,000•Onsite

About The Position

Applies systems security engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks. Works with customers throughout the system lifecycle to define and implement security protection needs and requirements early and sustainably, supporting security authorization. Collaborates with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products using technologies and methods such as encryption, vulnerability analysis, and security management. Integrates security methods into a cohesive system security perimeter and environment, and implements policies and procedures to monitor and maintain that environment. Prepares Certification and Accreditation documentation using standards including DITSCAP, DIACAP, DCID 6/3, Common Criteria, and NIST 800-37. Represents program security needs and requirements at customer meetings. The role leads security and privacy control assessments for embedded systems using NIST 800-53 and supports Risk Management Framework (RMF) accreditation and authorization processes. Work is performed 100% onsite in a lab environment, with no remote-support option. The schedule is 9/80: nine workdays in every 14-day period, totaling 80 hours, with every other Friday off.

Requirements

Bachelor’s degree and at least 9 years of prior relevant experience; or a graduate degree and at least 7 years of prior related experience; or, in lieu of a degree, at least 13 years of prior related experience.
TS/SCI security clearance.
Ability to obtain and maintain a DOD 8140 certification (or NIST 800-181), appropriate for the position, within 6 months of starting.
Experience leading programs through RMF accreditation and authorization, including steps 1–4 and development of standard Body of Evidence packages.
Experience processing accreditation and authorization packages.
Experience with RMF accreditation of Platform IT (PIT) systems.
Experience configuring and using cyber defense and vulnerability assessment tools such as ACAS and SCC.
Experience with DoD software selection and approval processes for COTS, GOTS, and FOSS.
Experience with security testing and verification.
Experience as a Control Account Manager (CAM) using Earned Value Management System (EVMS) tools.
Experience as an Integrated Product Team Lead (IPTL).
Ability to work 100% onsite in a lab environment; remote support is not available.

Nice To Haves

NSA Type 1 certification of cryptographic high-assurance devices.
Experience with NSA High Assurance products and IASRD and SERD requirements.
Experience leading Anti-Tamper development and implementation throughout the system development lifecycle.
Experience using DoD 5200.39 to identify and protect critical program information (CPI).
Experience engineering trustworthy and secure systems in accordance with NIST 800-160.
Experience drafting Program Protection Plans, Cybersecurity Strategies, Security Classification Guides, and Anti-Tamper Plans.
Active TS/SCI clearance is highly desired.

Responsibilities

Lead assessment activities for security and privacy controls in embedded systems using NIST 800-53.
Lead programs through RMF accreditation and authorization steps 1–4: categorization, control selection, control implementation, and security assessment; develop standard Body of Evidence packages.
Process accreditation and authorization packages, including for Platform IT (PIT) systems.
Configure and use cyber defense and vulnerability assessment tools such as ACAS and SCC.
Support security engineering, including basis-of-estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.
Assist program security with policies and procedures for emerging security technologies.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacement, and vulnerability-response projects.
Perform security testing and verification.
Represent program security needs, concerns, and requirements at customer meetings.
Lead development and implementation of Anti-Tamper (AT) throughout the system development lifecycle, including critical program information assessments, trade studies, AT requirements development, security architecture implementation, threat assessments using attack/countermeasure analysis, and verification and validation.
Serve as a subject matter expert in Anti-Tamper.
Draft Program Protection Plans, Cybersecurity Strategies, Security Classification Guides, and Anti-Tamper Plans.
Work with customers to define Anti-Tamper requirements, solutions, trade-offs, costs, implementation, system impacts, and effectiveness.
Perform Control Account Manager (CAM) and Integrated Product Team Lead (IPTL) duties.