Lead, Information Security Systems Engineer

L3Harris Technologies•Palm Bay, FL

22d•$92,500 - $171,500•Onsite

About The Position

The Lead, System Security Engineer applies Systems Security Engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of secure systems and networks. The role works closely with Government customers to define and implement system security needs and requirements throughout the system lifecycle, supporting sustainable security authorization. It also works with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products, using techniques such as encryption, vulnerability analysis, and security management. The engineer integrates security methods into a cohesive system security perimeter and operating environment, including the policies and procedures needed to monitor and maintain it. The role prepares Certification and Accreditation documentation under RMF and related standards, including DoD 8510, JSIG, ICD-503, and CNSSI 1253, and represents program security needs at customer meetings. Work is performed 100% onsite in a laboratory environment in Palm Bay, Florida, or Rochester, New York, with no remote-support option. The schedule is 9/80, with every other Friday off.

Requirements

Bachelor’s degree and at least 9 years of relevant experience; or a graduate degree and at least 7 years of related experience; or at least 12 years of related experience in lieu of a degree.
Minimum of a Collateral Secret security clearance.
Experience with DoD 5200.39.
Experience in RMF accreditation and authorization processes, including steps 1–4: categorization, control selection, control implementation, and security assessment.
Experience developing standard RMF body-of-evidence packages and processing A&A packages.
Experience with RMF accreditation of Platform IT systems.
Ability to obtain and maintain a position-appropriate DoD 8140 or NIST 800-181 certification within six months of starting.
Ability to work 100% onsite in a laboratory environment; remote support is not available.

Nice To Haves

Program Protection and System Security Engineering experience.
Experience developing and implementing System Security Engineering to protect CPI throughout the System Development Lifecycle.
Experience with RMF A&A on embedded systems.
Experience developing and certifying High Assurance Devices on embedded systems.
Experience configuring and using cyber defense and vulnerability assessment tools such as ACAS and SCC.
Experience with Model-Based Systems Engineering (MBSE).
NSA Type 1 Certification of cryptographic high-value products.
Experience with NSA High Assurance products and IASRD requirements.
Experience applying DISA SRGs and STIGs.
Windows and Linux system administration skills.
Experience developing content for and administering SIEM/audit-reduction tools such as Splunk.
DoD 8140 IASAE certification.
Strong understanding of engineering processes, concepts, and information security systems engineering principles, including NIST SP 800-160 Vol. 1.
Knowledge of system test and evaluation methods and RMF assessment methodology and processes.
Experience with cyber defense technologies.
Experience with CI/CD, agile system development, and DevSecOps tools and processes.
Understanding of system vulnerabilities and exploitation.
Top Secret/SCI clearance with an active polygraph.

Responsibilities

Lead development and implementation of System Security Engineering throughout the System Development Lifecycle.
Assess systems for Critical Program Information (CPI) and use DoD 5200.39 to identify and protect CPI.
Conduct trade studies and develop System Security Engineering requirements.
Assess threats through attack and countermeasure analysis.
Conduct verification and validation activities and support security testing and verification.
Engineer trustworthy and secure systems in accordance with NIST 800-160.
Develop and implement Program Protection Plans to safeguard CPI and technologies.
Draft Program Protection Plans, Cybersecurity Strategies, Security Classification Guides, and System Security Engineering Plans.
Work with customers to define System Security Engineering requirements, solutions, trade-offs, costs, implementation, system impacts, and effectiveness.
Support RMF accreditation and authorization activities, including steps 1–4 and development of standard body-of-evidence packages.
Support A&A package processing and RMF accreditation of Platform IT systems.
Assess security and privacy controls in embedded systems using NIST 800-53.
Support DoD software selection and approval processes for COTS, GOTS, and FOSS.
Support security engineering activities including basis-of-estimate development, requirements development, design, testing, configuration management, and information-system and data maintenance.
Assist program security with policies and procedures for emerging security technologies.
Collaborate with customers, internal program teams, and leadership to address program needs.
Support vulnerability assessments as required.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability-response projects.
Represent program security needs, concerns, and requirements at customer meetings.
Obtain and maintain a position-appropriate DoD 8140 or NIST 800-181 certification within six months of starting.