Specialist, Information System Security; ISSO

Specialist, Information System Security (ISSO)

Join to apply for the Specialist, Information System Security (ISSO) role at L3

Harris Technologies.

Job Title:

Specialist, Cyber Intelligence (ISSO)

Job Code: 32184

Location:

Colorado Springs, CO

Schedule:

9/80 – Off Every Other Friday

L3

Harris is seeking an Information System Security Officer (ISSO) to support the Space Superiority & Imaging division’s customers and programs. The ISSO will perform information system security activities under the guidance and oversight of the Information System Security Manager (ISSM) on assigned information systems. The ISSO will be knowledgeable in information technology and information assurance standards and regulations. Responsibilities include, but are not limited to, performing security control assessments and continuous monitoring, conducting configuration and vulnerability scanning and remediation, authoring and maintaining documentation and artifacts (body of evidence) in support of the Assessment and Authorization (A&A) of information systems following the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), remediating security control deficiencies, assessing and approving change requests for assigned information systems, performing user training and user account management oversight, and investigating and responding to security incidents and violations.

• Perform Continuous Monitoring of assigned information systems to include user activity monitoring (auditing) using SIEM tools or the native audit reduction capability of the operating system
• Conduct security control assessments
• Initiate, review, and remediate vulnerability and compliance scans using industry approved scanning tools (Nessus, ACAS)
• Review and assess the configuration settings of assigned information systems against the DISA STIG configuration standards
• Developing and updating documentation in support of obtaining or maintaining an Authority to Operate (ATO) for assigned information systems
• Attend Change Control Boards (CCB) to review and approved information system change requests
• Conduct and monitor security awareness training for information system users
• Respond to, and investigate, security incidents and violations

• Active Secret security clearance
• Bachelor’s Degree and minimum 4 years of prior relevant experience, or Graduate Degree and a minimum of 2 years of prior related experience. In lieu of a degree, minimum of 8 years of prior related experience

• DoD 8570 IAM III certification
• Experience as an ISSO/ISSM supporting classified systems under the JSIG, ICD 503, and/or 32 CFR Part 117 Section 18
• Experience as an ISSO/ISSM supporting NIPRNet and/or SIPRNet systems
• Experience hardening information systems and/or performing configuration/vulnerability assessments against the DISA STIG standards
• Experience auditing information system and user activity using SIEM tools like Splunk, and/or Log Insight
• Experience utilizing command line interfaces (CLI) and Linux/Unix commands to operate/support systems
• Experience scanning information systems using Nessus and/or ACAS
• Experience with A&A databases like eMASS and/or Xacta
• Experience performing RMF A&A activities and system accreditation
• Experience developing policies and procedures to implement security controls and customer requirements.
• Experience developing Plans of Action & Milestones (POA&M) to document and mitigate security control deficiencies

In compliance with pay transparency requirements, the salary range for this role in Colorado is $79,000 - $146,500 and for the greater Denver area is $90,500 - $168,500. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3

Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the…