Lead, Information Security Systems Engineering

L3Harris Technologies • Salt Lake City, UT

1d

About The Position

As a Lead, Information Security Systems Engineering at L3Harris Technologies, you will support the systems engineering team by providing security architecture and requirements oversight and verifying security requirements using manual and automated techniques. You will work closely with software, networking, FPGA, and hardware engineers to integrate and verify security requirements and build evidence showing how the system meets customer needs. The position is suited to engineers with a strong foundation in cybersecurity governance, risk, and compliance (GRC) and engineering experience who are interested in contributing to high-assurance defense systems. The role is located in Salt Lake City, Utah, follows a 9/80 schedule (80 hours over nine workdays in each 14-day period, with every other Friday off), and may require travel up to 10%. A minimum DoW Secret clearance is required.

Requirements

• Bachelor’s degree in an engineering discipline, including cybersecurity, computer science, or information systems, and at least 9 years of relevant experience; or a graduate degree in a related field and 7 years of relevant experience; or 13 years of relevant experience in lieu of a degree.
• One DoD 8140 / 8570-compliant certification, such as Security+, CISSP, SSCP, or GSEC, or ability to obtain one within 6 months of hire.
• Minimum DoW Secret clearance.
• Experience with the systems engineering lifecycle as it relates to security objectives, particularly requirements analysis, design, and testing.
• Experience with high-assurance or classified systems.
• Hands-on experience executing RMF within DoD environments.
• Experience applying NIST SP 800-53 security controls and STIGs.
• Experience supporting Authority to Operate (ATO) processes.
• Strong technical writing and documentation skills.
• Understanding of networking concepts, including TCP/IP, network architecture, and boundary defense.
• Experience working with embedded systems and/or communications systems.
• Familiarity with DevSecOps environments.
• Experience working in cross-functional engineering teams.

Nice To Haves

• Exposure to cryptographic systems, FIPS 140-3, or NSA certification processes.
• Familiarity with TEMPEST, Anti-Tamper, or related system security disciplines.
• Experience supporting government customers in a SETA/A&AS role.
• Additional certifications such as CISM, CISSP-ISSEP, CISA, CEH, or GIAC.
• Active TS/SCI clearance or ability to obtain.

Responsibilities

• Interpret and apply security controls from NIST SP 800-53, CNSSI 1253, and related guidance as requirements for functional engineers.
• Support implementation and validation of Security Technical Implementation Guides (STIGs) and other configuration baselines.
• Execute and support Risk Management Framework (RMF) lifecycle activities, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring, as needed.
• Develop, maintain, and review RMF documentation, including SSPs, SARs, POA&Ms, and Security Plans.
• Review high-level system designs to ensure security requirements are met across software, networking, and hardware.
• Interface with internal stakeholders, Authorizing Officials (AOs), and external assessors to support authorization efforts.
• Track and report compliance status, risks, and remediation activities to program leadership.
• Travel up to 10% as needed.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior