Lead, Info Security Systems Engineer

L3Harris Technologies•Colorado Springs, CO

1d•$110,500 - $205,500•Onsite

About The Position

The Lead, Info Security Systems Engineering will support an engineering team in defining, designing, implementing, documenting, testing, and sustaining security solutions for National Security Systems and other government customer systems. The role applies current NIST Risk Management Framework standards and publications, CNSSI 1253, the Joint SAP Implementation Guide, and Federal Information Processing Standards to support system certification and accreditation. The successful candidate will work with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products using encryption, vulnerability analysis, and security management approaches. The position designs and secures mixed and multi-level on-premises environments and cloud-based systems; assesses cloud services, containers, and orchestrated platforms; and implements cloud-native identity, access, encryption, key, and secrets management controls. It also supports systems and software engineering, application and supply-chain security testing, vulnerability management, infrastructure-as-code security, DevSecOps automation, and security reporting. The role applies secure-design practices to AI/ML-enabled and agentic capabilities and assesses associated security risks. This position is 100% onsite in Colorado Springs, Colorado, and cannot be performed remotely. The schedule is 9/80: employees work 9 out of every 14 days, totaling 80 hours, with every other Friday off. Up to 10% travel is possible.

Requirements

Bachelor’s degree and at least 9 years of relevant experience; or a graduate degree and at least 7 years of related experience; or at least 13 years of related experience in lieu of a degree.
Active Secret security clearance.
Ability to work 100% onsite in Colorado Springs, Colorado.
Up to 10% travel may be required.

Nice To Haves

Active TS/SCI security clearance.
DoD 8140.03 IASAE Level 2 certification.
Cloud security certification.
Experience with Model Based Systems Engineering methods, including UML, SysML, or UAF.
Experience configuring or operating vulnerability analysis tools such as Tenable NESSUS Security products.
Experience developing dashboards, configuring rules, and operating or administering SIEM or audit-reduction tools such as Splunk or GitLab Security Dashboard.
Experience supporting continuous authorization (cATO) and continuous monitoring approaches using OSCAL-based formats.
Experience contributing to zero trust architecture initiatives.
Experience applying secure-design principles to AI/ML-enabled and agentic systems, including deterministic controls, guard models, runtime observability, human oversight, data-governance guardrails, reproducible validation of agent output, and AI red-teaming before deployment.

Responsibilities

Apply NIST RMF and related publications, including developing System Security Plans, Security Control Traceability Matrices, Continuous Monitoring Plans, Security Assessment Plans and Procedures, Security Concept of Operations, and Plans of Action and Milestones.
Apply CMMC Level 2/3 and NIST 800-171 requirements to system design, assessment, and continuous compliance.
Categorize systems, recommend security control overlays, define baselines, apply controls to computing and network nodes, and verify their implementation.
Design and secure mixed, multi-level on-premises environments and cloud-based systems.
Support systems and software engineering, including creating data flow diagrams and interface control documents and performing trade studies.
Define and manage systems and security architectures and boundaries; develop Configuration Management Plans and apply environment-specific defense and assessment tools.
Assess and secure IaaS, PaaS, and SaaS implementations and containerized or orchestrated platforms, including secure workload configuration.
Implement cloud-native identity and access management, encryption, and key and secrets management controls.
Perform application and supply-chain security testing, including SAST, DAST, SCA, and SBOM generation using tools such as Fortify, Coverity, Anchore, and GitLab; support CI/CD pipeline security and application security and development STIG compliance; and produce summary reports.
Manage vulnerabilities through finding triage, disposition, remediation planning, risk-based prioritization, documented risk-acceptance rationale, and mitigation strategies across networks, systems, applications, and technology initiatives.
Support software supply-chain integrity and secure-by-design practices consistent with SSDF.
Review and secure infrastructure-as-code and develop and enforce automated security policies and admission controls.
Build automation and quality gates to accelerate security review and provide feedback to systems and software engineering teams.
Design and maintain security dashboards and stakeholder reporting for technical and non-technical audiences.
Apply secure design principles to AI/ML-enabled and agentic platform capabilities, including least-privilege machine identities, isolation and sandboxing, human approval gates, and immutable auditing of automated actions.
Assess and mitigate AI-specific security risks, including prompt injection, insecure agent tool use, model and data supply-chain integrity, and environment-appropriate data-handling constraints.