Specialist, Cyber Intelligence

L3Harris•San Diego, CA

About The Position

L3Harris is seeking an experienced Information System Security Officer (ISSO) to support cybersecurity, compliance, and operational oversight of classified information systems across multiple programs and facilities. The position works closely with the Information System Security Manager (ISSM) on Assessment and Authorization (A&A) activities, continuous monitoring, regulatory compliance, and customer engagement. The successful candidate is organized, self-motivated, and able to manage multiple priorities in a fast-paced classified environment. The role administers and maintains cybersecurity compliance for classified information systems operating under the Risk Management Framework (RMF), supports authorization and security assessment activities, and provides cybersecurity guidance to program teams. It involves coordination with government customers, security assessors, authorizing officials, program management, engineering teams, and facility security personnel. Travel of up to 10% may be required for customer meetings, inspections, audits, and program activities. The position requires an active Top Secret clearance with Sensitive Compartmented Information (TS/SCI) eligibility on the first day of employment.

Requirements

Bachelor’s degree and a minimum of 4 years of prior relevant experience; or a graduate degree and a minimum of 2 years of prior related experience; or, in lieu of a degree, a minimum of 8 years of prior related experience.
Active Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility on Day One.
At least 4 years of experience supporting cybersecurity, information assurance, or information system security activities in DoD, Intelligence Community, or other classified computing environments.
At least 4 years of experience implementing and maintaining information systems operating under the Risk Management Framework (RMF).
At least 4 years of experience supporting system authorization activities, including authorization packages, security documentation, continuous monitoring, and POA&M management.
At least 4 years of experience serving as a cybersecurity representative or ISSO supporting classified information systems, programs, or facilities.
At least 4 years of experience providing cybersecurity guidance and compliance support to program management, engineering, and technical teams.
At least 4 years of experience interpreting and applying NIST, DoD, DCSA, and customer cybersecurity requirements in operational environments.
At least 4 years of experience supporting security inspections, audits, assessments, and accreditation activities involving government customers and regulatory organizations.
Current CompTIA Security+ certification or equivalent DoD 8140-compliant baseline certification at the time of hire.
Ability to obtain and maintain a Top Secret security clearance with SCI eligibility as required by assigned programs.
Ability to manage multiple classified systems, priorities, and regulatory requirements with limited supervision.
Ability to organize, prioritize, and execute cybersecurity compliance efforts with strong attention to detail.

Nice To Haves

Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
Working knowledge of the Joint Special Access Program (SAP) Implementation Guide (JSIG).
Experience using eMASS to develop, manage, and maintain A&A packages and continuous monitoring activities.
Experience interacting with DCSA Information System Security Professionals (ISSPs), SCAs, AOs, government cybersecurity representatives, and customer security organizations.
Experience supporting authorization efforts involving interconnected systems, enclaves, or classified networks.
Experience supporting multiple classified systems, facilities, or contracts.
Knowledge of NIST Special Publication 800-53 Revision 5 security controls, STIGs, SCAP compliance validation, and vulnerability management processes.
Experience with Microsoft Windows, Red Hat Enterprise Linux (RHEL), Active Directory, virtualization technologies, enterprise logging solutions, and endpoint security platforms.

Responsibilities

Administer and maintain cybersecurity compliance for classified information systems operating under the Risk Management Framework (RMF).
Support Assessment and Authorization (A&A), including developing and maintaining System Security Plans (SSPs), authorization packages, security assessments, continuous monitoring activities, and Plan of Action and Milestones (POA&M) management.
Perform security control implementation reviews, vulnerability assessments, risk evaluations, and compliance validation in accordance with applicable government requirements.
Develop, review, and maintain cybersecurity documentation, including hardware and software inventories, network diagrams, security procedures, configuration management documentation, and system accreditation artifacts.
Manage assigned programs and information systems to ensure compliance with contractual, customer, and regulatory requirements.
Coordinate with government customers, DCSA representatives, Security Control Assessors (SCAs), Authorizing Officials (AOs), program management, engineering teams, and facility security personnel.
Support security inspections, customer assessments, accreditation reviews, vulnerability remediation efforts, and compliance audits.
Evaluate proposed system changes, architecture modifications, software installations, and engineering activities for security impact and compliance implications.
Conduct account management reviews, audit log reviews, media accountability activities, and continuous monitoring activities.
Provide program teams with guidance regarding cybersecurity requirements, authorization processes, and regulatory compliance obligations.
Support the ISSM in executing cybersecurity program objectives and serve as a backup representative when required.
Travel up to 10% for customer meetings, inspections, audits, and program activities.