Sr. Specialist, Information Security Systems Engineer

L3HHCM20 • Melbourne, FL

1d • Onsite

About The Position

L3Harris Corporation is seeking a Information Security Systems Engineer (ISSE) Senior Specialist (Level 4) for the Melbourne/Palm Bay, Florida location. This is an opportunity to take on unique challenges, expand your skills and experience, and contribute to mission critical systems solutions that help protect the U.S.A. and our allies. You will join a great team of talented professionals who take a collaborative approach and enjoy working together. Essential Functions: Experience with process for NSA Type 1 approval of a crypto device: Generate and support NSA Contract Data Requirements Lists (CDRLs) including reviews and guidance. Demonstrate comprehensive knowledge of data flows (e.g., TCP/IP, OSI model), cyber security certification experience including NIST Risk Management Framework (RMF), NSA Type 1, and communications security experience (COMSEC, TRANSEC). Experience with 2008-era IASRD/TSRD NSA processes and modern SERD 2.0/CDRD NSA processes. Provide comprehensive knowledge of cyber offense and defense requirements, design, and implementation: Offer inputs to technical security needs for non-security team members to facilitate cross-functional design activities. Identify security risks, threats, and vulnerabilities of networks, systems, applications, and new technology initiatives (hardware, software, cross-domain solutions, cryptographic devices, firewalls, intrusion detection systems, anti-virus systems, and software deployment tools). Apply familiarity with TEMPEST procedures and testing processes. Possess strong understanding of engineering processes, concepts and information security systems engineering principles (NIST SP 800-160 Vol 1). Evaluate, qualify, test, and deliver security architecture improvements, obsolescence replacement, compliance certification, and vulnerability response projects.

Requirements

• Bachelor’s Degree and minimum 6 years of prior relevant experience. Graduate Degree and a minimum of 4 years of prior related experience. In lieu of a degree, minimum of 10 years of prior related experience.
• Secret Clearance is required for this role on day 1. Security clearances may only be granted to U.S. citizens. Additionally, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information.
• No Dual Citizens for this role.

Nice To Haves

• Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC.
• Possess DoD 8570.01-M IAT Level 2 certification (e.g. CySA+, GICSP, GSEC, Security+CE, SSCP, or CCNA Security) and DoD 8570.01-M IASAE Level 2 certification (e.g. CASP+ CE or CISSP (or Associate)).
• Experience in writing and managing RMF body of evidence documents (e.g., System Security Plan (SSP), Security Compliance Traceability Matrix (SCTM), Risk Assessment Report (RAR), Continuous Monitoring (ConMon) Plan, and Security Assessment Plans and Procedures (SAPP)).
• Experience in the content development and administration of Security Information and Event Management (SIEM)/audit reduction tools (e.g., Splunk).
• Experience with the application of Security Technical Implementation Guides (STIGs).

Responsibilities

• Generate and support NSA Contract Data Requirements Lists (CDRLs) including reviews and guidance.
• Demonstrate comprehensive knowledge of data flows (e.g., TCP/IP, OSI model), cyber security certification experience including NIST Risk Management Framework (RMF), NSA Type 1, and communications security experience (COMSEC, TRANSEC).
• Offer inputs to technical security needs for non-security team members to facilitate cross-functional design activities.
• Identify security risks, threats, and vulnerabilities of networks, systems, applications, and new technology initiatives (hardware, software, cross-domain solutions, cryptographic devices, firewalls, intrusion detection systems, anti-virus systems, and software deployment tools).
• Apply familiarity with TEMPEST procedures and testing processes.
• Evaluate, qualify, test, and deliver security architecture improvements, obsolescence replacement, compliance certification, and vulnerability response projects.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees