Senior Specialist, Information Security Systems Engineer - Secret Clearance

L3Harris Technologies•Palm Bay, FL

2d•$92,500 - $171,500•Onsite

About The Position

Applies Systems Security Engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks to maintain system security. Works closely with Government customers to define and implement security protection needs, concerns, and requirements throughout the system life cycle, supporting security authorization. Works with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products. Uses encryption technology, vulnerability analysis, and security management, integrating methods into cohesive security perimeters, environments, policies, and procedures. Prepares Certification and Accreditation documentation under RMF and related standards, including DoD 8510, JSIG, ICD-503, and CNSSI 1253, and represents program security needs at customer meetings. The role leads System Security Engineering throughout the System Development Lifecycle, develops program protection and security plans, evaluates threats and vulnerabilities, and supports RMF authorization and accreditation activities. Work is performed 100% onsite in a lab environment, with no remote-support option. The position is located in Palm Bay, Florida, or Rochester, New York, and follows a 9/80 schedule: 80 hours over nine workdays in each 14-day period, with every other Friday off.

Requirements

Bachelor’s degree and at least 6 years of relevant experience; or a graduate degree and at least 4 years of related experience; or, in lieu of a degree, at least 10 years of related experience.
Minimum collateral Secret security clearance.
Program Protection and System Security Engineering experience, including support of accreditation activities.
Experience with DoD 5200.39.
Experience with RMF accreditation and authorization processes, including steps 1–4 and standard body-of-evidence package development.
Ability to obtain and maintain a position-appropriate DoD 8140 or NIST 800-181 certification within six months of starting.
Ability to work 100% onsite in a lab environment; remote support is not available.

Nice To Haves

Prior or current experience developing and implementing System Security Engineering to protect CPI throughout the System Development Lifecycle.
Prior or current experience with RMF A&A on embedded systems.
Prior or current experience developing and obtaining High Assurance Device certification on embedded systems.
Experience configuring and using cyber defense and vulnerability assessment tools such as ACAS and SCC.
Experience with Model-Based Systems Engineering (MBSE).
NSA Type 1 Certification of cryptographic high-value products.
Experience with NSA High Assurance products and IASRD requirements.
Experience applying DISA SRGs and STIGs.
Windows and Linux system administration skills.
Experience developing content for and administering SIEM/audit reduction tools such as Splunk.
DoD 8140 IASAE certification.
Strong understanding of engineering processes, concepts, and information security systems engineering principles, including NIST SP 800-160 Vol. 1.
Knowledge of system test and evaluation methods and RMF assessment methodology and process.
Experience with cyber defense technologies.
Experience with CI/CD, agile system development, and DevSecOps tools and processes.
Understanding of system vulnerabilities and exploitation.

Responsibilities

Lead the development and implementation of System Security Engineering throughout the System Development Lifecycle.
Assess systems for Critical Program Information (CPI) and use DoD 5200.39 to identify and protect CPI.
Conduct trade studies, develop System Security Engineering requirements, and assess threats through attack/countermeasure analysis.
Conduct verification and validation activities and support security testing and verification.
Engineer trustworthy and secure systems in accordance with NIST 800-160.
Develop and implement Program Protection Plans to safeguard CPI and technologies.
Draft Program Protection Plans, Cybersecurity Strategies, Security Classification Guides, and System Security Engineering Plans.
Work with customers to define security engineering requirements, solutions, trade-offs, costs, implementation, system impacts, and effectiveness.
Support RMF accreditation and authorization activities, including steps 1–4 and development of standard body-of-evidence packages.
Support A&A package processing and RMF accreditation of Platform IT systems.
Assess security and privacy controls in embedded systems using NIST 800-53.
Support DoD software selection and approval processes for COTS, GOTS, and FOSS.
Support security engineering activities covering basis-of-estimate development, requirements, design, testing, configuration management, and maintenance of information systems and data.
Assist program security in developing policies and procedures for emerging security technologies.
Collaborate with customers, internal program teams, and leadership to address program needs.
Support vulnerability assessment activities as required.
Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability-response projects.
Represent program security needs, concerns, and requirements at customer meetings.
Obtain and maintain a position-appropriate DoD 8140 or NIST 800-181 certification within six months of starting.