Lead InfoSec Systems Engineer – RMF​/NIST

L3

Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3

Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

L3

Harris is the Trusted Disruptor in defense tech. With customers’ mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

Job Title:
Lead, Info Security Systems Engineering

Job Code: 44770

Job Location:
Colorado Springs, CO

Job Schedule: 9/80 - Employees work 9 out of every 14 days - totaling 80 hours worked (Every Other Friday Off)

Job Description:

The successful candidate will support a highly motivated engineering team in defining, designing, implementing, documenting, testing and sustaining security solutions on National Security Systems, or other systems engineered for our government customers, using current standards within National Institute of Standards & Technology (NIST) Risk Management Framework, Special Publications 800-37, 800-53, 800-171, and other NIST publications;
Committee on National Security Systems Instruction (CNNSI) 1253, Joint SAP Implementation Guide (JSIG), and Federal Information Processing Standards (FIPS) to certify and achieve system accreditations.

The successful candidate will work with system developers or commercial product vendors in the design and evaluation of state-of-the-art secure systems, networks, and database products, using methods such as encryption technology, vulnerability analysis and security management.

Essential Functions:

• Exercise skills in NIST Risk Management Framework (RMF) and all related NIST publications, to include writing System Security Plans, Security Control Traceability Matrix, Continuous Monitoring Plan, Security Assessment Plans & Procedures, Security Concept of Operations, and Plan of Action and Milestones.
• Apply Cybersecurity Maturity Model Certification (CMMC Level 2/3) and NIST 800-171 requirements to system design, assessment, and continuous compliance.
• Perform skills in implementing/assessing security controls, to include writing system security categorization memorandum, recommending appropriate security control overlays, defining security control baselines based on defined system security categorization and approved security overlays, and applying security controls to computing/network nodes and verifying implementation of security controls.
• Design and secure mixed, multi-level security level on-prem environments and cloud-based systems.
• Assist in systems/software engineering functions, to include creation of data flow diagrams, interface control documents, and performing trade studies.
• Define and manage systems/security architectures, including system security boundaries, and develop Configuration Management Plans (CMP), applying defense and assessment tools specific to each environment type.
• Assess and secure Infrastructure/Platform/Software as a Service (IaaS, PaaS, SaaS) implementations and containerized/orchestrated platforms, including secure workload configuration.
• Implement identity and access management, encryption, and key and secrets management controls in cloud-native environment (e.g., AWS)
• Perform application and supply-chain security testing, including Static and Dynamic Application Security Testing (SAST/DAST), Software Composition Analysis (SCA), and Software Bill of Materials (SBOM) generation, using tools such as Fortify, Coverity, Anchore, and Git Lab within a Dev Sec Ops  Continuous Integration/Continuous Deployment (CI/CD) Pipeline, for Application Security and Development Secure Technical Implementation Guide (STIG) compliance, and generate summary reports.
• Perform vulnerability management, including finding triage, disposition, remediation planning with risk-based prioritization, documented risk-acceptance rationale, and risk mitigation strategies across networks, systems, applications, and new technology initiatives (hardware, software, firewalls, intrusion detection systems, anti-virus systems, and software deployment tools).
• Support software supply-chain integrity and secure-by-design practices consistent with the Secure Software…