Specialist, Cyber Intelligence - Vulnerability Management - TS​/SCI CI Poly

L3

Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3

Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

L3

Harris is the Trusted Disruptor in defense tech. With customers’ mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

This position is for a role within the Vulnerability Management Team (VMT). Primary responsibilities are to execute security scanning and remediation operations under the guidance of the VMT Lead on assigned government-authorized systems. The candidate will coordinate with system POC’s for scheduling and executing compulsory scans of assigned information systems, including vulnerability, compliance, network detection and mapping, and controlled interfaces. The candidate must be knowledgeable on a variety of vulnerability assessment tools, including Rapid 7 Nexpose, NMAP, or similar security tools.

Additionally, the candidate must be able to create and interpret scan reports and recommend prioritized remediation plans. Ability to script and develop parsing tools preferred, such as BASH or Python. Other responsibilities include collaboration with ISSM’s, ISSE’s, and System Administrators on POA&M items; analyzing system scan metrics and presenting to stakeholders; assisting with investigating security incidents such as data spills, data integrity infractions, and malicious events;

authoring and delivering security education and training to a range of audiences, as needed.

• Configure scan engines for vulnerability, network detection and mapping, and controlled interface scans
• Execute scans, generate reports, interpret results, and recommend remediation plans
• Provide any requested Assessment & Authorization (A&A) documentation of assigned systems as applicable
• Execute Continuous Monitoring Plans
• Interface with system managers and Information Technology (IT) personnel to track and resolve identified vulnerabilities
• Create, maintain, and update documentation
• Develop new concepts or standards which make significant and impactful improvements to processes, systems, solutions, or products
• Travel up to 10%

• Bachelor’s Degree and minimum 4 years of prior relevant experience. Graduate Degree and a minimum of 2 years of prior related experience. In lieu of a degree, minimum of 8 years of prior related experience.
• Active Top Secret security clearance with SCI
• Willingness to submit to a Full Scope Polygraph

• Certified Information System Security Professional (ISC2 CISSP) or equivalent certification
• Security+ CE or equivalent certification
• 4 years of prior relevant experience to include experience with networking equipment; experience running vulnerability scans and interpreting results (e.g. Nessus, Assured Compliance Assessment Solution [ACAS], Rapid7 Nexpose, NMAP, etc.)
• Ability to produce quality results in a high operational tempo
• Experience with project management tools such as Jira and Confluence
• Experience developing, managing, and providing evidence to close POA&M associated with the A&A and…