Senior Specialist, Information Security Systems Engineering (ISSE)

Job Title: Senior Specialist Information Security Systems Engineering (ISSE)

Job Code: 37695

Job Location: Dahlgren VA or Colorado Springs CO

Job Schedule: 5/8 Monday - Friday

Job Description:

This job posting is for three positions in three different locations. Apply current systems security engineering methods practices and technologies to the architecture design development evaluation and integration of systems and networks to maintain system security. Throughout the lifecycle of system works closely with customers to ensure that the security protection needs concerns and requirements are defined and implemented with appropriate fidelity and rigor early and in a sustainable manner that will allow for the security authorization of the system of interest. Works with systems developers or commercial product vendors in the design and evaluation of state-of-the-art secure systems networks and database products using methods such as encryption technology vulnerability analysis and security management.

Responsible for integration of multiple methods into a cohesive system security perimeter and environment while implementing the policies and procedures necessary to monitor and maintain such an environment. Prepares Certification and Accreditation documentation using multiple industry standards such as NIST 800-37 to achieve security authorization of supported systems. Represents program security needs concerns and requirements at customer meetings.

Essential Functions:

• Knowledge of security requirements documentation and risk mitigation strategies.
• Experience with CNSSI 1253 DoDI 8510.01 Risk Management Framework Accreditation Process.
• Conduct ACAS (Assured Compliance Assessment Solution) vulnerability scans using Nessus Security Center manage scan profiles update plugins and troubleshoot issues as needed.
• Perform annual control assessments using established test procedures to validate security controls are functioning as intended.
• Develop track and manage Plans of Action & Milestones (POA&Ms) for identified security weaknesses and deficiencies.
• Prepare and submit quarterly security status reports to stakeholders documenting POA&M progress and ongoing security activities.
• Perform continuous monitoring activities document completion of required tasks and report any findings.
• Conduct weekly audit log reviews to identify security events including failed authentication attempts privilege escalation unusual activity patterns and atypical usage.
• Conduct monthly reviews of user accounts to identify and disable inactive accounts in accordance with security policies.
• Perform annual validation of user access privileges and role assignments in coordination with supervisors to ensure appropriate access levels and enforcement of separation of duties.
• Serve as primary incident handler for all security incidents following established operating procedures and escalation protocols.
• Assist with patch management including application of patches and verification of successful deployment to ensure timely remediation of vulnerabilities.
• Maintain comprehensive understanding of system architecture components data flows interconnections and security categorization.
• Coordinate Interconnection Security Agreements (ISAs) for external connections and ensure proper documentation in Security Plans and Risk Assessments.
• Follow Configuration Management Plan (CMP) procedures for all system changes and document security impacts of modifications.
• Manage and monitor ESS and Powertech security tools and systems to support continuous monitoring activities
• Maintain IT Security Logbook documenting standard operating procedures and security activity records
• Work is 100% on-site.

Qualifications:

• Bachelors Degree and minimum 6 years of prior relevant experience. Graduate Degree and a minimum of 4 years of prior related lieu of a degree minimum of 10 years of prior related experience.
• DOD 8140 certification (or NIST 800-181) appropriate for the position (e.g. Sec SecX CISSP)
• Top Secret Clearance with SCI required.

Preferred Additional Skills:

• Familiarity with IBM AIX Cisco and Juniper networking equipment operating systems Palo Alto firewalls and VMware vCenter.
• Direct experience with cryptographic systems used to protect space/ground communications.
• Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS SCC and ESS.
• System testing and evaluation methods and RMF assessment methodology & process.
• Experience applying DISA System Technical Implementation Guides (STIGs) to Operating Systems Applications Network devices
• Experience hardening Linux and Windows based operating systems
• Experience implementing Multi-Factor Authentication (RSA SecurID or equivalent)

In compliance with pay transparency requirements the salary range for this role in California Massachusetts New Jersey Washington and the Greater D.C Denver or NYC areas is $106500 - $196500 . The salary range for this role in Colorado state Hawaii Illinois Maryland Minnesota New York state Cleveland Ohio and Vermont is $92500 - $171500 . This is not a guarantee of compensation or salary as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits including health and disability insurance 401(k) match flexible spending accounts EAP education assistance parental leave paid time off and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire schedule type and the applicability of collective bargaining agreements.

Required Experience:

Senior IC