Senior Specialist, Information Security Systems Engineer - Secret Clearance

L3Harris Technologies•Palm Bay, FL

7d•Onsite

About The Position

Applies systems security engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks to maintain system security. Works with customers throughout the system lifecycle to define and implement security protection needs, concerns, and requirements with appropriate rigor and sustainability to support system authorization. Collaborates with systems developers and commercial product vendors to design and evaluate secure systems, networks, and database products using encryption technology, vulnerability analysis, and security management. Integrates security methods into a cohesive system security perimeter and environment, and implements policies and procedures to monitor and maintain that environment. Prepares Certification and Accreditation documentation using industry standards such as DITSCAP, NIACAP, DCID 6/3, Common Criteria, and NIST 800-37. Represents program security needs, concerns, and requirements at customer meetings. The position is 100% onsite in a lab environment, with no remote-support option. The schedule is 9/80: employees work 80 hours over nine days in each 14-day period and have every other Friday off. The role requires an active collateral Secret clearance and the ability to obtain and maintain a position-appropriate DoD 8140 or NIST 800-181 certification within six months of starting.

Requirements

Bachelor’s degree and at least 6 years of prior relevant experience; or graduate degree and at least 4 years of prior related experience; or, in lieu of a degree, at least 10 years of prior related experience.
Active collateral Secret security clearance.
Ability to obtain and maintain a position-appropriate DoD 8140 certification or NIST 800-181 certification within six months of starting.
Experience leading programs through RMF accreditation and authorization, including steps 1–4 and development of a standard Body of Evidence package.
Experience with A&A package processing.
Experience in RMF accreditation of Platform IT (PIT) systems.
Experience configuring and using cyber defense and vulnerability assessment tools such as ACAS and SCC.
Experience with DoD software selection and approval processes for COTS, GOTS, and FOSS.
Experience with security testing and verification.
Experience as a Control Account Manager (CAM) using EVMS tools.
Experience as an Integrated Product Team Lead (IPTL).
Ability to work 100% onsite in a lab environment; remote support is not available.

Nice To Haves

NSA Type 1 certification of cryptographic high-assurance devices.
Experience with NSA High Assurance products and IASRD and SERD requirements.
Experience leading Anti-Tamper (AT) development and implementation throughout the System Development Lifecycle.
Experience assessing systems for Critical Program Information, conducting trade studies, developing AT requirements, implementing security architectures, assessing threats through attack/countermeasure analysis, and conducting verification and validation.
Experience serving as an Anti-Tamper subject matter expert.
Experience using DoD 5200.39 to identify and protect Critical Program Information (CPI).
Experience engineering trustworthy and secure systems in accordance with NIST 800-160.
Experience drafting Program Protection Implementation Plans (PPIPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and AT Plans.
Ability to obtain a Top Secret clearance; active TS/SCI clearance is highly desired.

Responsibilities

Lead assessment activities for security and privacy controls in embedded systems using NIST 800-53.
Lead programs through RMF accreditation and authorization processes, including RMF steps 1–4: categorization, control selection, control implementation, and security assessment; develop standard Body of Evidence packages.
Process accreditation and authorization packages.
Support RMF accreditation of Platform IT (PIT) systems.
Configure and use cyber defense and vulnerability assessment tools, including ACAS and SCC.
Support DoD software selection and approval processes for COTS, GOTS, and FOSS.
Support security engineering activities, including basis-of-estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.
Assist program security in developing policies and procedures for emerging security technologies.
Support evaluation, qualification, testing, and delivery of security architecture improvement, obsolescence replacement, and vulnerability response projects.
Perform security testing and verification.
Perform Control Account Manager (CAM) duties using Earned Value Management System (EVMS) tools.
Serve as an Integrated Product Team Lead (IPTL).
Represent program security needs, concerns, and requirements at customer meetings.
Prepare Certification and Accreditation documentation to support security authorization of systems.
Preferred: Lead development and implementation of Anti-Tamper (AT) throughout the System Development Lifecycle, including assessing systems for Critical Program Information, conducting trade studies, developing AT requirements, implementing security architectures, assessing threats through attack/countermeasure analysis, and conducting verification and validation.
Preferred: Serve as a subject matter expert in Anti-Tamper.
Preferred: Draft Program Protection Implementation Plans (PPIPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and AT Plans.
Preferred: Interact with customers to define AT requirements, solutions, tradeoffs, costs, implementation, system impacts, and effectiveness.