Senior Associate, Cyber Intelligence (ISSO)

L3HHCM20•Colorado Springs, CO

1d•$69,000 - $128,500

About The Position

L3Harris is seeking an Information System Security Officer (ISSO) to support the Space Superiority & Imaging division’s customers and programs. The ISSO will perform information system security activities under the guidance and oversight of the Information System Security Manager (ISSM) on assigned information systems. The ISSO will be knowledgeable in information technology and information assurance standards and regulations. Responsibilities include, but are not limited to, performing security control assessments and continuous monitoring, conducting configuration and vulnerability scanning and remediation, authoring and maintaining documentation and artifacts (body of evidence) in support of the Assessment and Authorization (A&A) of information systems following the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), remediating security control deficiencies, assessing and approving change requests for assigned information systems, performing user training and user account management oversight, and investigating and responding to security incidents and violations.

Requirements

Active Secret security clearance
Bachelor’s Degree and minimum 2 years of prior relevant experience, or Graduate Degree with no prior experience. In lieu of a degree, minimum of 6 years of prior related experience

Nice To Haves

DoD 8570 IAM II certification
Experience as an ISSO supporting classified systems under the JSIG, ICD 503, and/or 32 CFR Part 117 Section 18
Experience auditing information systems and user activity
Experience in IT support, IT preventative maintenance, building and maintaining IT systems
Experience and proficiency with troubleshooting operating systems and networks
Experience configuring information systems to the compliance standards published by DISA, CISA, and/or the NIST

Responsibilities

Perform Continuous Monitoring of assigned information systems to include user activity monitoring (auditing) using SIEM tools or the native audit reduction capability of the operating system
Conduct security control assessments
Initiate, review, and remediate vulnerability and compliance scans using industry approved scanning tools (Nessus, ACAS)
Review and assess the configuration settings of assigned information systems against the DISA STIG configuration standards
Developing and updating documentation in support of obtaining or maintaining an Authority to Operate (ATO) for assigned information systems
Attend Change Control Boards (CCB) to review and approved information system change requests
Conduct and monitor security awareness training for information system users
Respond to, and investigate, security incidents and violations