Lead, Info Security Systems Engineer

L3Harris•Fountain, CO

23d•Onsite

About The Position

The Lead, Info Security Systems Engineer supports an engineering team in defining, designing, implementing, documenting, testing, and sustaining security solutions for National Security Systems and other systems developed for government customers. The role applies NIST Risk Management Framework standards and related NIST publications, CNSSI 1253, the Joint SAP Implementation Guide, and FIPS to support system certification and accreditation. The engineer works with system developers and commercial vendors to design and evaluate secure systems, networks, and database products using encryption, vulnerability analysis, and security management methods. The position leads security engineering across on-premises, cloud, and containerized environments. It encompasses security architecture and control implementation, vulnerability and application security testing, DevSecOps automation, infrastructure-as-code review, supply-chain security, continuous monitoring, and stakeholder reporting. The role also applies secure design and risk mitigation practices to AI/ML-enabled and agentic capabilities. This position is 100% onsite in Colorado Springs, Colorado, and cannot be performed remotely. The schedule is 9/80: employees work nine out of every 14 days, totaling 80 hours, with every other Friday off. Up to 10% travel is possible.

Requirements

Bachelor’s degree and at least 9 years of relevant experience; or a graduate degree and at least 7 years of related experience; or, in lieu of a degree, at least 13 years of related experience.
Active Secret security clearance.
Experience with NIST RMF and related security standards and publications.
Experience implementing and assessing security controls and developing security authorization documentation.
Experience securing on-premises, cloud, and/or containerized environments.
Experience with vulnerability management and application or supply-chain security practices.
Ability to work 100% onsite in Colorado Springs, Colorado.
Ability to travel up to 10%.

Nice To Haves

Active TS/SCI clearance is highly desired.
DoD 8140.03 IASAE Level 2 certification.
Cloud security certification.
Model Based Systems Engineering experience using UML, SysML, or UAF.
Experience configuring or operating vulnerability analysis tools such as Tenable Nessus.
Experience developing dashboards, configuring rules, and operating or administering SIEM or audit-reduction tools such as Splunk or GitLab Security Dashboard.
Experience supporting continuous authorization (cATO) and continuous monitoring using OSCAL-based formats.
Experience contributing to zero-trust architecture initiatives.
Experience applying secure design principles to AI/ML-enabled and agentic systems, including deterministic controls, guard models and runtime observability, human oversight, data-governance guardrails, reproducible validation of agent outputs, and AI red-teaming.

Responsibilities

Apply NIST RMF and related publications; create System Security Plans, Security Control Traceability Matrices, Continuous Monitoring Plans, Security Assessment Plans and Procedures, Security Concept of Operations documents, and Plans of Action and Milestones.
Apply CMMC Level 2/3 and NIST 800-171 requirements to system design, assessment, and continuous compliance.
Implement and assess security controls, including system categorization, security control overlays and baselines, application of controls to computing and network nodes, and verification of control implementation.
Design and secure mixed-level, multi-level on-premises environments and cloud-based systems.
Support systems and software engineering, including creating data-flow diagrams and interface-control documents and performing trade studies.
Define and manage systems and security architectures and boundaries; develop Configuration Management Plans and apply environment-specific defense and assessment tools.
Assess and secure IaaS, PaaS, and SaaS implementations and containerized or orchestrated platforms, including secure workload configuration.
Implement identity and access management, encryption, and key and secrets management controls in cloud-native environments such as AWS.
Conduct application and supply-chain security testing, including SAST, DAST, SCA, and SBOM generation, using tools such as Fortify, Coverity, Anchore, and GitLab in a DevSecOps CI/CD pipeline; support STIG compliance and produce summary reports.
Manage vulnerabilities through finding triage, disposition, risk-prioritized remediation planning, documented risk-acceptance rationale, and mitigation strategies across networks, systems, applications, and technology initiatives.
Support software supply-chain integrity and secure-by-design practices consistent with the SSDF.
Review and secure infrastructure-as-code; develop and enforce automated security policies and admission controls, including security controls as code.
Build automation and quality gates that streamline security review and provide feedback to systems and software engineering teams.
Design and maintain security dashboards and reporting for technical and non-technical stakeholders.
Apply secure design principles to AI/ML-enabled and agentic capabilities, including least-privilege machine identities, isolation and sandboxing, human approval gates, and immutable audit of automated actions.
Assess and mitigate AI-specific risks, including prompt injection, unsafe agent tool use, model and data supply-chain integrity, and environment-appropriate data-handling constraints.