Principal, Cyber Intelligence

L3Harris Technologies•Huntsville, AL

1d•Onsite

About The Position

The Principal, Cyber Intelligence leads the development, maintenance, and sustainment of cybersecurity initiatives supporting collateral classified and special access program systems across the Missile Solutions Segment. The role maintains government relationships, independently leads Approval to Operate (ATO) strategy, identifies and assesses risk, prioritizes remediation, and drives issues to closure across multiple programs and sites. The position represents the organization in customer assessments, authorization reviews, audits, and other government engagements, and may be appointed as an ISSM for complex classified information systems. It coordinates information security initiatives with internal and external stakeholders, identifies effective cybersecurity tools and techniques, and serves as a subject matter expert on applicable government and industry requirements. The role develops information assurance policies, System Security Plans and supporting documentation, cybersecurity strategies for cloud architecture and artificial intelligence software, training curricula, risk-based metrics, continuous monitoring strategies, and scalable approaches to RMF activities. It also chairs segment-level Information Security Working Groups, standardizes processes, conducts inspections and control tests, coordinates with security officers, and delivers information system security briefings. Travel to offsite locations may be required, up to 25%.

Requirements

Bachelor’s degree and a minimum of 12 years of experience, or a graduate degree and a minimum of 10 years of prior related experience.
Active U.S. Top Secret clearance.

Nice To Haves

10+ years of experience as an ISSO or ISSM supporting classified programs.
10+ years of experience using security-relevant tools, systems, and applications in support of RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
10+ years of cybersecurity leadership experience overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
10+ years of experience communicating complex technical risks, translating their impact, and advising senior leaders.
Existing customer Authorizing Official–DIB peer relationships.
SAP and/or SCI information system management experience.
Participation in national industrial security associations and working groups.
In-depth knowledge of RMF and Security Technical Implementation Guides (STIGs).
Experience with NIST 800-53 Security Controls, ICD 503, and JSIG requirements or programs.
Experience with Windows 7/10, Windows Server 2008/2012/2016, Active Directory, Group Policy, VMWare, Nutanix, Citrix, and cloud-based security.
Technical knowledge of Linux and UNIX-based platforms.

Responsibilities

Represent the organization during customer assessments, authorization reviews, audits, and other government engagements.
May serve as ISSM for complex classified information systems.
Coordinate information security initiatives with internal stakeholders and external partners to support timely threat-information sharing and cost-effective security solutions.
Work with cybersecurity professionals to select tools and techniques for scalable, secure, and effective cybersecurity solutions.
Serve as a subject matter expert on JSIG, NISPOM, Intelligence Community Directives, and DCSA DAAPM requirements.
Identify training needs and develop curricula to address skill gaps and build common skills by level.
Develop and publish segment information assurance policies aligned with corporate initiatives.
Develop and review System Security Plans, supporting documentation and artifacts, and local policies in accordance with applicable requirements.
Develop cybersecurity strategies and plans to protect cloud-based architecture and the use of artificial intelligence software.
Chair Information Security Working Groups at the Segment level.
Drive process standardization across the Segment.
Develop risk-based metrics and continuous monitoring strategies to measure information assurance program health and effectiveness.
Assess the impact of government policy directives and identify corrective actions.
Develop scalable solutions for efficient management of RMF activities.
Conduct periodic self-inspections, tests, and reviews of the Information Security program; ensure systems operate as authorized or accredited and implement corrective actions for findings and vulnerabilities.
Develop and conduct test procedures to verify RMF controls meet customer requirements.
Coordinate with Facility Security Officers and Contractor Program Security Officers to define, implement, and maintain information security policies, strategies, and procedures.
Create and conduct Information System Security briefings.
Travel to offsite locations as required, up to 25%.