Job Title: Senior Associate, Cyber Intelligence (ISSO)
Job Code: 46665
Job Location: Rochester, NY - Onsite
Job Schedule: 9/80: Employees work 9 out of every 14 days - totaling 80 hours worked - and have every other Friday off
Job Description:ISSO provides protection and safeguarding of information systems under the guidance of the Information System Security Manager (ISSM) and work with the Information System Stakeholders on assigned government-authorized systems. Additionally, the ISSO must have the adaptability to learn detailed knowledge and expertise required to manage the security aspects of an information system and is assigned responsibility for the day-to-day security operations of a system.
Works with the Program and IT Admin functions to ensure security auditing tools are working as designed and optimized to present actionable alerts and information for the ISSOs conducting audit reviews. Works with Program/Industrial Security to prepare, participate in, and remediate Customer inspection activities or findings. Builds strong relationships with these functional teams to ensure the overall success of the Cybersecurity Programs.
Essential Functions: - Ability to support day-to-day security operations of government-authorized information systems.
- Ensure compliance with DCSA Assessment and Authorization Guide (DAAG), NISPOM Ch8, ICD 503,JSIG, NIST 800 series documents (NIST 800-53r5/4, 800-171 etc.)
- Ability to support ongoing security monitoring to meet RMF Continuous Monitoring requirements, including all weekly, monthly, quarterly, semi-annual, and annual requirements.
- Utilize tools such as Nessus, Tenable Security Center, ACAS, and Splunk to interpret logs, reduce audit data, and ensure compliance with security baselines.
- Work with IT Admins to ensure security tools (auditing, scanning, and alerting) are operational and optimized.
- Build strong coalitions with functional teams to enhance Cybersecurity Program success.
- Audit and configure Windows and Linux systems to meet DISA STIG and SCAP compliance standards.
- Validate system security settings, hardening measures, and patch management efforts.
- Ensure that systems are operating as authorized/accredited and that conditions have not changed.
- Stakeholder in Configuration change management processes (including hardware/software changes, account management, media control procedures, disposition, Assured File Transfers (AFT) and related documentation) in accordance with policies and procedures.
- Analyze and report on cybersecurity metrics to leadership.
- Continuously assess system security posture and implement improvements based on evolving threats and inspection results.
- ISSO experience the DCSA Assessment and Authorization Guide (DAAG) and with eMASS.
- Experience as an ISSO supporting classified systems under DCSA Assessment and Authorization Guide (DAAG), NISPOM Ch8, ICD 503, and/or NIST 800-53.
- Familiarity developing, managing, and providing evidence to close POA&Ms associated with the A&A and project management processes.
Qualifications: Bachelor's Degree and 2 years prior experience, Graduate Degree or equivalent with 0 to 2 years of prior related experience. In lieu of a degree, a minimum of 6 years of prior related experience.
Active Secret security clearance.
Security+ Certification or IAT Level 2 Certification.
In compliance with pay transparency requirements, the salary range for this role in New York is $70,500 - $130,500. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements.
