Senior Associate, Cyber Intelligence

L3Harris Technologies•City of Rochester, NY

3d•$70,500 - $130,500•Onsite

About The Position

The Information Systems Security Officer (ISSO) protects and safeguards information systems under the guidance of the Information System Security Manager (ISSM), working with information system stakeholders on assigned government-authorized systems. The role is responsible for day-to-day security operations and requires developing detailed knowledge and expertise to manage system security. The ISSO partners with Program, IT Administration, and Industrial Security functions to optimize security auditing tools, support customer inspections and remediation, and strengthen cybersecurity programs.

Requirements

Bachelor's degree and 2 years of prior experience; or a graduate degree or equivalent with 0 to 2 years of prior related experience; or, in lieu of a degree, at least 6 years of prior related experience.
Active Secret security clearance.
Security+ certification or IAT Level 2 certification.
ISSO experience with DAAG and eMASS.
Experience as an ISSO supporting classified systems under DAAG, NISPOM Chapter 8, ICD 503, and/or NIST 800-53.
Familiarity with developing, managing, and providing evidence to close POA&Ms associated with A&A and project management processes.

Responsibilities

Support day-to-day security operations for government-authorized information systems.
Ensure compliance with DAAG, NISPOM Chapter 8, ICD 503, JSIG, and applicable NIST 800-series standards.
Conduct ongoing security monitoring to meet RMF continuous monitoring requirements, including weekly, monthly, quarterly, semi-annual, and annual requirements.
Use Nessus, Tenable Security Center, ACAS, and Splunk to interpret logs, reduce audit data, and assess compliance with security baselines.
Work with IT administrators to ensure auditing, scanning, and alerting tools are operational and optimized.
Collaborate with functional teams to support cybersecurity program success.
Audit and configure Windows and Linux systems for DISA STIG and SCAP compliance.
Validate security settings, hardening measures, and patch management efforts.
Ensure systems continue operating as authorized or accredited and that relevant conditions have not changed.
Participate in configuration change management, including hardware and software changes, account management, media control, disposition, Assured File Transfers, and related documentation.
Analyze and report cybersecurity metrics to leadership.
Continuously assess system security posture and implement improvements based on evolving threats and inspection results.
Prepare for, participate in, and remediate customer inspections and findings with Program and Industrial Security.
Develop, manage, and provide evidence to close POA&Ms associated with A&A and project management processes.