Senior Cyber Security Engineer

L3Harris Technologies•City of Rochester, NY

1d•$92,500 - $197,500•Onsite

About The Position

Applies Systems Security Engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks to maintain system security. Works with Government customers to define and implement security protection needs, concerns, and requirements throughout the system life cycle, supporting security authorization. Works with system developers and commercial vendors to design and evaluate secure systems, networks, and database products. Uses encryption technology, vulnerability analysis, and security management, integrating these methods into cohesive security environments with the policies and procedures needed to monitor and maintain them. Prepares Certification and Accreditation documentation using RMF and related standards and processes, including DoD 8510, JSTIG, ICD-503, and CNSSI 1253, and represents program security needs and requirements at customer meetings. The role includes certification of cryptographic high-assurance devices, security assessment of embedded systems, RMF accreditation and authorization work, and development and processing of authorization evidence packages. The position is performed 100% onsite in a laboratory environment, with no remote support option. The job is located in Rochester, New York, or Columbia, Maryland, and follows a 9/80 schedule: 80 hours over nine workdays in each 14-day period, with every other Friday off.

Requirements

Strong knowledge of the job area, typically including a specialty within the discipline; broad project-management knowledge may also be relevant.
Bachelor’s degree and at least 6 years of relevant experience; or a graduate degree and at least 4 years of related experience; or at least 10 years of related experience in lieu of a degree.
Minimum of a Collateral Secret security clearance.
Work onsite 100% in a laboratory environment; remote support is not available.

Nice To Haves

Prior or current experience developing and certifying high-assurance devices on embedded systems.
Prior or current experience with RMF A&A on embedded systems.
Experience developing and implementing System Security Engineering for protecting CPI throughout the System Development Lifecycle.
Ability to assess systems for Critical Program Information (CPI).
Experience conducting trade studies and developing System Security Engineering requirements.
Experience assessing threats through attack/countermeasure analysis.
Experience conducting Verification and Validation activities.
Knowledge of DoD 5200.39 for identifying and protecting CPI.
Experience engineering trustworthy and secure systems in accordance with NIST 800-160.
Experience developing and implementing comprehensive Program Protection Plans (PPP) to safeguard CPI and technologies.
Experience drafting Program Protection Plans (PPPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and System Security Engineering Plans.
Ability to interact with customers to define System Security Engineering requirements, solutions, trades, costs, implementation, system impacts, and effectiveness.
Highly motivated, self-starting, and able to operate with little supervision in diverse environments.
Successful track record planning, executing, and tracking personal task assignments.
Experience leading small product development teams and mentoring other engineers.

Responsibilities

Certify cryptographic high-assurance devices.
Apply knowledge of high-assurance products and IASRD and SERD requirements.
Configure and use cyber defense and vulnerability assessment tools such as ACAS and SCC.
Assess security and privacy controls in embedded systems using NIST 800-53.
Perform RMF accreditation and authorization activities, including steps 1–4: categorization, control selection, control implementation, and security assessment.
Develop standard bodies of evidence (BoE) packages and process A&A packages.
Accredit Platform IT (PIT) systems under RMF.
Collaborate with customers, internal program teams, and leadership to address program needs.
Support DoD software selection and approval processes for COTS, GOTS, and FOSS.
Support security engineering activities, including basis-of-estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.
Assist program security teams in developing policies and procedures for emerging security technologies.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.
Represent program security needs, concerns, and requirements in customer meetings.