Senior Associate, Info Security Systems Engineer

L3Harris•Fountain, CO

15h•Onsite

About The Position

The Senior Associate, Info Security Systems Engineer supports an engineering team in defining, designing, implementing, documenting, testing, and sustaining security solutions for National Security Systems and other systems engineered for government customers. The role applies NIST Risk Management Framework standards and publications, CNSS Instruction 1253, the Joint SAP Implementation Guide, Federal Information Processing Standards, and Department of Defense Cyber Survivability guidance to help certify and accredit systems. The position works with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products using approaches such as encryption technology, vulnerability analysis, and security management. The role is 100% onsite in Colorado Springs, Colorado, with up to 15% travel possible; it cannot be performed remotely.

Requirements

Bachelor’s degree and at least 2 years of prior relevant experience; or a graduate degree and at least 1 year of prior related experience; or, in lieu of a degree, at least 4 years of prior related experience.
Active Secret security clearance.
DoD 8140.03 IAT Level 2 certification.
Ability to work onsite; the position is 100% onsite and cannot be performed remotely.

Nice To Haves

Experience performing Model Based Systems Engineering using UML, SysML, or UAF.
Experience configuring or operating vulnerability-analysis tools such as Tenable NESSUS Security products.

Responsibilities

Define, design, implement, document, test, and sustain security solutions for National Security Systems and other government-customer systems.
Apply applicable NIST publications and frameworks, CNSS Instruction 1253, JSIG, FIPS, and DoD Cyber Survivability guidance to support system certification and accreditation.
Work with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products.
Assess and authorize systems, manage vulnerabilities, and help ensure security compliance through regular assessments.
Contribute to the design and implementation of cybersecurity features in products.
Evaluate information-system security posture and recommend enhancements.
Implement measures to protect sensitive information and support privacy-regulation compliance.
Oversee cybersecurity operations and align them with business objectives.
Configure networks to enforce security policies and prevent unauthorized access.
Apply application-security principles to protect applications from cyber threats.
Use the NIST Risk Management Framework to manage risk and support system resilience.
Communicate and address IT security risks with stakeholders.
Evaluate and improve security architectures in response to emerging threats and technologies.
Collaborate with stakeholders to integrate security considerations into business processes.
Apply DevSecOps practices and automate security checks in CI/CD pipelines.
Detect, prevent, and respond to cyber incidents.
Align security milestones with product development timelines.
Promote security awareness and best practices across the organization.
Apply agile principles to cybersecurity initiatives.
Contribute to development and maintenance of the enterprise architecture framework.
Interpret and apply IT architectural guidelines so cybersecurity solutions align with organizational standards.