Manager, Cyber Intelligence

L3HHCM20•Greenville, TX

3d•Onsite

About The Position

L3Harris Greenville, Texas, is seeking an Information System Security Manager (ISSM) in support of Defense Counterintelligence and Security Agency (DCSA) programs. Duties for successful candidates include, but are not limited to reviewing and developing information system accreditation/certification support documentation; interacting with customers when changes occur that may affect the information system accreditation/certification; performing system and network self-inspections; identifying information system vulnerabilities and implementing countermeasures; Responsibility for program policy creation/update; maintaining information system security records. The ISSM will provide assistance on IT and information system security issues that may affect the mission of the customer. This ISSM reports to the Director of Cyber Intelligence for the site. Develop and conduct risk assessment procedures for verification of RMF/Assessment and Authorization (A&A) safeguards to meet various regulatory requirements based upon government regulations and NIST 800 series (800-53, etc.) guidelines. Author and provide oversight of various artifacts supporting RMF package artifacts to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Actions & Milestones (POA&M), Continuous Monitoring (ConMon) Plan, CONOPS, and other RMF BoE artifacts. Coordinate with internal/external partners to establish system security designs and validate compliance requirements. Responsible for analyzing and/or administering security controls for information systems. The selected candidate will act as a member of a diverse security team and participate in Engineering and Configuration Review Boards and Working Groups to develop secure system solutions. Monitor IA Program compliance by performing periodic self-inspections, tests and reviews of the IS to ensure that systems are operating as authorized/accredited and that conditions have not changed. Configuration of change management processes (hardware/software, account Management, Disposition, Assured File Transfers (AFT) and related documentation in accordance to policies and procedures. Review audit data of the IS and IS components (technical & physical) for anomalous or unauthorized activities. Participate in documenting and publishing security related workflows and procedures to mitigate vulnerabilities and recommend changes to system or system components. Conduct Cybersecurity training, briefings, and presentations for multiple levels of business. Provide leadership and oversight to ISSOs. Participate in interdepartmental projects and provides council on Cybersecurity policies and procedures.

Requirements

Bachelor’s Degree and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience.
Must have an Active DoD Secret clearance with SCI eligibility
Relevant experience with various operating systems (e.g. Windows, Linux, UNIX, Solaris, Cisco), Windows server systems, system virtualization, and other related peripherals.
Experience using Microsoft Office products.
IAM Level III Certification (CISSP, CISM etc.)
Experience with RMF/Assessment and Authorization (A&A) safeguards to meet various regulatory requirements based upon government regulations and NIST 800 series (800-53, etc.)
Experience with DCSA Information system assessments, approvals and monitoring
Experience with SPLUNK, Security Center/Nessus, and other software/systems

Nice To Haves

Experience with configuration/certification and auditing/analysis of Windows, Linux, UNIX systems to include stand-alone IS, peer-to-peer networks, LANs/WANs and interconnections.
Experience with applying, searching, leveraging SCAP and STIGs
Demonstrate excellent organizational, decision-making, and problem-solving skills.
Experience with technical configuration standards relating to information system security.
Well versed in risk management, mitigation, and customer service.
Excellent team leadership skills, with experience leading and collaborating in a multi-disciplinary, diverse, and dynamic team environment.
Excellent communication skills (written, verbal, & presentation)

Responsibilities

Reviewing and developing information system accreditation/certification support documentation
Interacting with customers when changes occur that may affect the information system accreditation/certification
Performing system and network self-inspections
Identifying information system vulnerabilities and implementing countermeasures
Responsibility for program policy creation/update
Maintaining information system security records
Providing assistance on IT and information system security issues that may affect the mission of the customer
Develop and conduct risk assessment procedures for verification of RMF/Assessment and Authorization (A&A) safeguards to meet various regulatory requirements based upon government regulations and NIST 800 series (800-53, etc.) guidelines
Author and provide oversight of various artifacts supporting RMF package artifacts to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Actions & Milestones (POA&M), Continuous Monitoring (ConMon) Plan, CONOPS, and other RMF BoE artifacts
Coordinate with internal/external partners to establish system security designs and validate compliance requirements
Responsible for analyzing and/or administering security controls for information systems
Act as a member of a diverse security team and participate in Engineering and Configuration Review Boards and Working Groups to develop secure system solutions
Monitor IA Program compliance by performing periodic self-inspections, tests and reviews of the IS to ensure that systems are operating as authorized/accredited and that conditions have not changed
Configuration of change management processes (hardware/software, account Management, Disposition, Assured File Transfers (AFT) and related documentation in accordance to policies and procedures
Review audit data of the IS and IS components (technical & physical) for anomalous or unauthorized activities
Participate in documenting and publishing security related workflows and procedures to mitigate vulnerabilities and recommend changes to system or system components
Conduct Cybersecurity training, briefings, and presentations for multiple levels of business
Provide leadership and oversight to ISSOs
Participate in interdepartmental projects and provides council on Cybersecurity policies and procedures
Train and mentor teammates in coordination with the Cybersecurity Director
Ability to obtain and maintain any additional clearances as required