Principal, Cyber Intelligence

L3Harris Technologies•Huntsville, AL

10d•Onsite

About The Position

The Missile Solutions Segment Security Organization is seeking a Principal, Cyber Intelligence to lead the development, maintenance, and sustainment of cybersecurity initiatives for collateral classified and special access program systems across the segment. The role maintains government relationships and independently leads Approval to Operate (ATO) strategy, risk assessment, remediation prioritization, and issue resolution across multiple programs and sites. The position provides cybersecurity subject-matter expertise and leadership for information assurance and Risk Management Framework (RMF) activities. It develops security policies, plans, training, metrics, and scalable solutions; coordinates with internal and external stakeholders; and supports government assessments and authorization reviews. The role is based in Huntsville, Alabama, follows a 9/80 schedule, and may require travel to offsite locations up to 25%.

Requirements

Bachelor’s degree and a minimum of 12 years of experience, or a graduate degree and a minimum of 10 years of prior related experience.
Active U.S. Top Secret clearance.

Nice To Haves

At least 10 years of experience as an ISSO or ISSM supporting classified programs.
At least 10 years of experience using security-relevant tools, systems, and applications for RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
At least 10 years of cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
At least 10 years of experience communicating complex technical risks, translating their impact, and advising senior leaders.
Existing customer Authorizing Official–DIB peer relationships.
SAP and/or SCI information system management experience.
Participation in national industrial security associations and working groups.
In-depth knowledge of RMF and Security Technical Implementation Guides (STIGs).
Experience with NIST 800-53 Security Controls, ICD 503, and JSIG requirements and programs.
Experience with Windows 7/10, Windows Server 2008/2012/2016, Active Directory, Group Policy, VMware, Nutanix, Citrix, and cloud-based security.
Technical knowledge of Linux and UNIX-based platforms.

Responsibilities

Represent the organization during customer assessments, authorization reviews, audits, and other government engagements.
May be appointed as ISSM for complex classified information systems.
Coordinate information security initiatives with internal stakeholders and external partners to support timely receipt of threat information and cost-effective protection of classified, controlled unclassified, and proprietary information.
Work with cybersecurity professionals to identify appropriate tools and techniques for scalable, secure, and effective cybersecurity solutions.
Serve as a subject-matter expert on requirements in the JSIG, 32 CFR Part 117/NISPOM, Intelligence Community Directives, and DCSA DAAPM.
Identify training needs and develop curriculum to address gaps and build common skills by level.
Develop and publish segment information assurance policies aligned with corporate initiatives.
Develop and review System Security Plans, supporting documentation and artifacts such as POA&Ms and NSPs, and local policies in accordance with applicable requirements.
Develop cybersecurity strategies and plans to protect cloud-based architecture and the use of artificial intelligence software.
Chair segment-level Information Security Working Groups.
Drive process standardization across the segment.
Develop risk-based metrics and continuous monitoring strategies to measure information assurance program health and effectiveness.
Examine the effects of government policy directives and identify corrective actions.
Develop scalable solutions for efficient management of RMF activities.
Conduct periodic self-inspections, tests, and reviews of the Information Security program; ensure systems operate as authorized or accredited and implement corrective actions for findings and vulnerabilities.
Develop and conduct test procedures to verify RMF controls and meet customer requirements.
Coordinate with Facility Security Officers and Contractor Program Security Officers to define, implement, and maintain information security policies, strategies, and procedures.
Create and conduct Information System Security briefings.
Travel to offsite locations as required, up to 25%.