Job Title: Lead, Information Security Systems Engineer
Job Code: 44664
Job Location: Waco, Texas
Job Schedule: 9/80
Job Description: The L3Harris Waco Systems Engineering team is looking for an experienced individual contributor role within our team for Information Security (Cybersecurity). The position will directly execute on programs, interact directly with customers, and improve processes as the Information System Security Engineer (ISSE) Subject Matter Expert for systems, software, and networks.
Essential Functions:- Candidate must hold a DoD 8570/8140 approved baseline certification. Security+ or equivalent required with CISSP or equivalent preferred.
- Well versed in NIST 800-53 standards.
- Ensure delivered information systems meet security standards in accordance with ICD 503, Risk Management Framework (RMF).
- Interact with Customers and accreditation officials to define, execute, and achieve required Cybersecurity objectives. Work alongside Customers to provide Cyber Security as a Service (CsaaS) support.
- Identify the information protection needs for systems, software, and networks. Assist Design Engineers in overarching system design with a focus on Cybersecurity. Support steps one through six of the Risk Management Framework (RMF) Security Life Cycle, ensuring information assurance is included in the design architecture.
- Document security controls/requirements within the System Requirements Specifications. Assist the ISSEs with analysis of User and System requirements and constraints.
- Work closely with the Software Development Team on Secure Software Development Practices to ensure that developed software vulnerabilities are addressed early in the development process. Perform Dynamic and Static code analysis with the use of code analysis tools.
- Develop secure/hardened Linux based Operating System (OS).
- Utilize Vulnerability Scanning Tools to scan target networks/applications and identify weaknesses. Track Software Vulnerability Findings and Software Patches.
- Develop Risk Assessment Reports (RAR), System Security Plans (SSP), Security Control Traceability Matrix (SCTM), et al needed to obtain an Authorization to Operate (ATO) for fielded systems.
- Review ISSE work products for completeness and quality.
- Ability to support travel up to 15% CONUS / OCONUS.
Qualifications: - Bachelor's Degree in STEM and minimum of 9 years of prior related Information Security experience.
- Graduate Degree in STEM with a minimum of 7 years of prior related Information Security experience.
- Active TS/SCI Government Security Clearance required upon start.
Preferred Additional Skills:- Understanding of the INCOSE Systems Engineering "V" with the ability to oversee work products and coach direct reports through the stages of work including requirements capture, design, purchasing, build, and test.
- Previous experience analyzing system specifications and translating those to Information Security system requirements.
- Previous accreditation Information Security experience.
- Experience working in Xacta or eMASS
- Experience obtaining an authorization for systems on or in support of an aircraft.
