Lead, Information Security Systems Engineer - Secret Clearance

L3Harris Technologies•Palm Bay, FL

4d•Onsite

About The Position

The Lead, Information Security Systems Engineer applies systems security engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks. The role works throughout the system lifecycle with customers to define and implement security protection needs, concerns, and requirements early and sustainably to support system authorization. It also works with developers and commercial product vendors to design and evaluate secure systems, networks, and database products using encryption technology, vulnerability analysis, and security management methods. The position integrates security methods into a cohesive system security perimeter and environment and implements policies and procedures to monitor and maintain that environment. It prepares Certification and Accreditation documentation using industry standards including DITSCAP, NIACAP, DCID 6/3, Common Criteria, and NIST 800-37, and represents program security needs at customer meetings. This is a 100% onsite role in a lab environment in Palm Bay, Florida, with no remote support option. The schedule is 9/80, with every other Friday off.

Requirements

Bachelor’s degree and at least 9 years of prior relevant experience; or graduate degree and at least 7 years of prior related experience; or, in lieu of a degree, at least 13 years of prior related experience.
Active collateral Secret security clearance.
Ability to obtain and maintain a DoD 8140 certification, or NIST 800-181 certification, appropriate for the position within 6 months of starting.
Experience leading RMF accreditation and authorization processes, including steps 1–4 and standard Body of Evidence package development.
Experience with A&A package processing and RMF accreditation of Platform IT systems.
Experience configuring and using cyber defense and vulnerability assessment tools such as ACAS and SCC.
Experience with DoD software selection and approval processes for COTS, GOTS, and FOSS.
Experience with security testing and verification.
Experience as a Control Account Manager using EVMS tools.
Experience as an Integrated Product Team Lead.
Ability to work 100% onsite in a lab environment; remote support is not available.

Nice To Haves

NSA Type 1 Certification of cryptographic high-assurance devices.
Experience with NSA High Assurance products and IASRD and SERD requirements.
Experience leading Anti-Tamper development and implementation throughout the system development lifecycle.
Experience using DoD 5200.39 to identify and protect Critical Program Information.
Experience engineering trustworthy and secure systems in accordance with NIST 800-160.
Ability to obtain a Top Secret clearance; active TS/SCI clearance is highly desired.

Responsibilities

Lead assessment activities for security and privacy controls in embedded systems using NIST 800-53.
Lead programs through RMF accreditation and authorization processes, including RMF steps 1–4 and development of standard Body of Evidence packages.
Process A&A packages and support RMF accreditation of Platform IT (PIT) systems.
Configure and use cyber defense and vulnerability assessment tools such as ACAS and SCC.
Support DoD software selection and approval processes for COTS, GOTS, and FOSS.
Support security engineering activities, including basis of estimate development, requirements development, design, testing, configuration management, and information systems and data maintenance.
Assist program security with policies and procedures for emerging security technologies.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.
Conduct security testing and verification.
Perform Control Account Manager duties using Earned Value Management System tools and serve as an Integrated Product Team Lead.
Lead development and implementation of Anti-Tamper throughout the system development lifecycle, including assessing systems for Critical Program Information, conducting trade studies, developing AT requirements, implementing security architectures, assessing threats through attack/countermeasure analysis, and conducting verification and validation activities.
Serve as a subject matter expert in Anti-Tamper.
Use DoD 5200.39 to identify and protect Critical Program Information.
Engineer trustworthy and secure systems in accordance with NIST 800-160.
Draft Program Protection Implementation Plans, Cybersecurity Strategies, Security Classification Guides, and Anti-Tamper Plans.
Interact with customers to define Anti-Tamper requirements, solutions, trade-offs, costs, implementation, system impacts, and effectiveness.
Represent program security needs, concerns, and requirements at customer meetings.
Prepare Certification and Accreditation documentation using applicable industry standards to support security authorization.