Lead, Information Security Systems Engineer - Secret Clearance

L3Harris•Palm Bay, FL

2d•Onsite

About The Position

Applies systems security engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks. Works with customers throughout the system lifecycle to define and implement security protection needs and requirements in a sustainable manner that supports security authorization. Works with systems developers and commercial product vendors to design and evaluate secure systems, networks, and database products using encryption technology, vulnerability analysis, and security management. Integrates security methods into cohesive system security perimeters and environments and implements procedures to monitor and maintain them. Prepares certification and accreditation documentation using industry standards including DITSCAP, NIACAP, DCID 6/3, Common Criteria, and NIST 800-37. Represents program security needs and requirements at customer meetings. The role leads security and privacy control assessment activities for embedded systems, supports Risk Management Framework (RMF) accreditation and authorization, and develops standard Body of Evidence packages. It supports security engineering and program security activities, including requirements, design, testing, configuration management, maintenance, and evaluation of security architecture improvements and vulnerability responses. Work is performed 100% onsite in a lab environment, with no remote-work option. The employee must be able to obtain and maintain a position-appropriate DoD 8140 or NIST 800-181 certification within six months of starting.

Requirements

Bachelor’s degree and at least 9 years of prior relevant experience; or graduate degree and at least 7 years of prior related experience; or, in lieu of a degree, at least 13 years of prior related experience.
Active collateral Secret security clearance.
Ability to obtain and maintain a DoD 8140 certification, or NIST 800-181 certification, appropriate for the position within six months of start.
Experience leading programs through RMF accreditation and authorization processes, including RMF steps 1–4 and standard Body of Evidence package development.
Experience with accreditation and authorization package processing.
Experience with RMF accreditation of Platform IT (PIT) systems.
Experience configuring and using cyber defense and vulnerability assessment tools such as ACAS and SCC.
Experience with DoD software selection and approval processes for COTS, GOTS, and FOSS.
Experience with security testing and verification.
Work onsite 100% in a lab environment; remote support is not available.
Experience as a Control Account Manager (CAM) using Earned Value Management System (EVMS) tools.
Experience as an Integrated Product Team Lead (IPTL).

Nice To Haves

NSA Type 1 Certification of cryptographic high assurance devices.
Experience with NSA High Assurance products and IASRD and SERD requirements.
Experience leading development and implementation of Anti-Tamper throughout the System Development Lifecycle.
Experience using DoD 5200.39 to identify and protect Critical Program Information (CPI).
Experience engineering trustworthy and secure systems in accordance with NIST 800-160.
Experience drafting Program Protection Implementation Plans (PPIPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and Anti-Tamper Plans.
Ability to obtain a Top Secret clearance.
Active TS/SCI clearance is highly desired.

Responsibilities

Lead assessment activities for security and privacy controls in embedded systems using NIST 800-53.
Lead programs through RMF accreditation and authorization processes, including steps 1–4: categorization, control selection, control implementation, and security assessment; develop standard Body of Evidence packages.
Process accreditation and authorization packages, including for Platform IT (PIT) systems.
Configure and use cyber defense and vulnerability assessment tools such as ACAS and SCC.
Support security engineering activities, including basis-of-estimate development, requirements development, design, test, configuration management, and maintenance of information systems and data.
Support program security in developing policies and procedures for emerging security technologies.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.
Perform security testing and verification.
Lead development and implementation of Anti-Tamper (AT) throughout the System Development Lifecycle, including assessing systems for Critical Program Information, conducting trade studies, developing AT requirements, implementing security architectures, assessing threats through attack/countermeasure analysis, and conducting verification and validation activities.
Serve as a subject matter expert in Anti-Tamper.
Interact with customers to define Anti-Tamper requirements, solutions, trade-offs, costs, implementation, system impacts, and effectiveness.
Represent program security needs, concerns, and requirements at customer meetings.
Prepare certification and accreditation documentation using applicable industry standards to support system security authorization.