Senior Cyber Security Engineer

L3Harris•Bell, MD

1d•Onsite

About The Position

L3Harris Technologies is hiring a Senior Specialist, Information Security Systems Engineer to apply Systems Security Engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks. The role helps maintain system security and works closely with Government customers to define and implement security protection needs, concerns, and requirements throughout the system life cycle, supporting system security authorization. The engineer works with systems developers and commercial product vendors to design and evaluate secure systems, networks, and database products. The role uses encryption technology, vulnerability analysis, and security management, and integrates security methods into a cohesive system security perimeter and environment, including the policies and procedures needed to monitor and maintain it. The engineer prepares Certification and Accreditation documentation using RMF and related standards and processes, including DoD 8510, JSTIG, ICD-503, and CNSSI 1253, and represents program security needs and requirements in customer meetings. This position is performed 100% onsite in a lab environment, with no remote-support option. The schedule is 9/80: employees work 9 out of every 14 days, totaling 80 hours, with every other Friday off. The position is based in Rochester, New York, or Columbia, Maryland, and requires a minimum Collateral Secret security clearance.

Requirements

Bachelor’s degree and at least 6 years of relevant experience; or a graduate degree and at least 4 years of related experience; or, in lieu of a degree, at least 10 years of related experience.
Strong knowledge of the job area, typically with a specialty within the discipline; may have broad project-management knowledge.
Minimum Collateral Secret security clearance.
Work onsite 100% in a lab environment; remote support is not available.

Nice To Haves

Prior or current experience developing and certifying High Assurance Devices on embedded systems.
Prior or current experience with RMF A&A on embedded systems.
Experience developing and implementing System Security Engineering to protect CPI throughout the System Development Lifecycle.
Experience assessing systems for Critical Program Information (CPI).
Experience conducting trade studies and developing System Security Engineering requirements.
Experience assessing threats through attack/countermeasure analysis.
Experience conducting Verification and Validation activities.
Experience using DoD 5200.39 to identify and protect CPI.
Experience engineering trustworthy and secure systems in accordance with NIST 800-160.
Experience developing and implementing Program Protection Plans (PPP) to safeguard CPI and technologies.
Experience drafting PPPs, Cybersecurity Strategies, Security Classification Guides (SCGs), and System Security Engineering Plans.
Ability to interact with customers to define System Security Engineering requirements, solutions, trades, costs, implementation, system impacts, and effectiveness.
Motivated self-starter able to work with little supervision in diverse environments.
Track record of planning, executing, and tracking personal task assignments.
Experience leading small product development teams and mentoring other engineers.

Responsibilities

Certify Cryptographic High Assurance Devices and work with High Assurance products, IASRD, and SERD requirements.
Configure and use cyber defense and vulnerability assessment tools such as ACAS and SCC.
Assess security and privacy controls in embedded systems using NIST 800-53.
Use RMF accreditation and authorization processes, including steps 1–4, and develop standard bodies of evidence (BoE) packages.
Process A&A packages and support RMF accreditation of Platform IT (PIT) systems.
Collaborate with customers, internal program teams, and leadership to address program needs.
Provide DoD software selection and approval processes for COTS, GOTS, and FOSS.
Support security engineering activities, including basis-of-estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.
Assist program security in developing policies and procedures for emerging security technologies.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.
Prepare Certification and Accreditation documentation under RMF and related standards and processes.
Represent program security needs, concerns, and requirements at customer meetings.