Lead, Info Security Systems Engineer (TS/SCI Required)

L3Harris Technologies•Colorado Springs, CO

25d•$110,500 - $205,500•Onsite

About The Position

The Lead, Info Security Systems Engineering role supports a highly motivated engineering team in defining, designing, implementing, documenting, testing, and sustaining security solutions for National Security Systems and other government customer systems. The work applies current NIST Risk Management Framework standards and publications, CNNSI 1253, JSIG, and FIPS to certify systems and achieve accreditation. The position works with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products using encryption, vulnerability analysis, and security management. The role designs and secures mixed, multi-level on-premises and cloud environments and supports systems and software engineering, cloud and container security, DevSecOps, application and supply-chain security, vulnerability management, automation, and security reporting. It also applies secure design principles to AI/ML-enabled and agentic platform capabilities and assesses associated security risks. This position is 100% onsite in Colorado Springs, Colorado, with up to 10% travel possible. The schedule is 9/80: 80 hours across nine workdays in each 14-day period, with every other Friday off.

Requirements

Bachelor’s degree and at least 9 years of relevant experience; or a graduate degree and at least 7 years of related experience; or at least 13 years of related experience in lieu of a degree.
Active TS/SCI clearance.
Experience applying the NIST Risk Management Framework and related security standards and publications.
Experience designing, implementing, documenting, testing, and sustaining security solutions for national security or government systems.
Experience with security controls, system security documentation, security architecture, and accreditation.
Experience securing on-premises, cloud, and containerized environments.
Experience with cloud identity and access management, encryption, and key and secrets management.
Experience with application and software supply-chain security testing and DevSecOps CI/CD pipelines.
Experience with vulnerability management, risk-based remediation, and risk mitigation.
Experience with infrastructure-as-code security, automated policy controls, and security automation.
Experience applying secure design principles to AI/ML-enabled or agentic systems and assessing AI-specific security risks.

Nice To Haves

DoD 8140.03 IASAE Level 2 certification.
Cloud security certification.
Model Based Systems Engineering experience using UML, SysML, or UAF.
Experience configuring or operating vulnerability analysis tools such as Tenable NESSUS Security products.
Experience developing dashboards, configuring rules, and operating or administering SIEM or audit-reduction tools such as Splunk or GitLab Security Dashboard.
Experience supporting continuous authorization (cATO) and continuous monitoring approaches using OSCAL-based formats.
Experience contributing to zero trust architecture initiatives.
Experience applying secure design principles to AI/ML-enabled and agentic systems, including deterministic controls paired with AI assistance, guard models and runtime observability, human oversight and data-governance guardrails, reproducible validation of agent output, and AI red-teaming before deployment.

Responsibilities

Apply the NIST Risk Management Framework and related publications, and write System Security Plans, Security Control Traceability Matrices, Continuous Monitoring Plans, Security Assessment Plans and Procedures, Security Concepts of Operations, and Plans of Action and Milestones.
Apply CMMC Level 2/3 and NIST 800-171 requirements to system design, assessment, and continuous compliance.
Implement and assess security controls, including preparing system security categorization memoranda, recommending security control overlays, defining baselines, applying controls to computing and network nodes, and verifying implementation.
Design and secure mixed, multi-level on-premises environments and cloud-based systems.
Support systems and software engineering, including creating data flow diagrams and interface control documents and performing trade studies.
Define and manage systems and security architectures and system security boundaries; develop Configuration Management Plans and apply environment-specific defense and assessment tools.
Assess and secure IaaS, PaaS, SaaS, and containerized or orchestrated platforms, including secure workload configuration.
Implement identity and access management, encryption, and key and secrets management controls in cloud-native environments such as AWS.
Perform application and supply-chain security testing, including SAST, DAST, SCA, and SBOM generation, using tools such as Fortify, Coverity, Anchore, and GitLab within DevSecOps CI/CD pipelines; support Application Security and Development STIG compliance and produce summary reports.
Manage vulnerabilities through finding triage, disposition, remediation planning with risk-based prioritization, documented risk-acceptance rationale, and risk-mitigation strategies across networks, systems, applications, and technology initiatives.
Support software supply-chain integrity and secure-by-design practices consistent with the Secure Software Development Framework.
Review and secure infrastructure-as-code and develop and enforce automated security policies and admission controls.
Build automation with quality gates to streamline security review and provide feedback to systems and software engineering teams.
Design and maintain security dashboards and reports for technical and non-technical stakeholders.
Apply secure design principles to AI/ML-enabled and agentic platform capabilities, including least-privilege machine identities, agent isolation and sandboxing, human approval gates, and immutable auditing of automated actions.
Assess and mitigate AI-specific security risks, including prompt injection, insecure agent tool use, model and data supply-chain integrity, and operating-environment-appropriate data handling.
Perform the role 100% onsite and travel up to 10% as needed.