Job Title: Specialist, Information Security Systems Engineering
Job Code: 41046
Job Location: Greenville, TX
Job Schedule: 9/80 Regular - Employees work 9 out of every 14 days - totaling 80 hours worked - and have every other Friday off.
Job Description: As a L3H Information Systems Security Engineer (ISSE) is part of a team which establishes, supports, and coordinates tasks related to Cybersecurity and Assessment & Authorization (A&A) to obtain and maintain Authorizations to Operate (ATOs) for delivered systems via the NIST 800 Series Risk Management Framework (RMF). This position is part of a larger customer Information Assurance team, coordinating L3Harris efforts supporting the Information Owner, and assisting the ISSM, to implement actions needed to document current/future baselines and new capabilities in the NIST/RMF-approved process.
Essential Functions: - This position combines an understanding of both software engineering and hardware engineering.
- Prepare and present technical results for internal and external program meetings
- Develop, track and present technical metrics.
- Understanding of hardware level interdependencies for Infrastructure, Network, & Mission Processor requirements between multiple devices as well as understanding how software works in conjunction with hardware interdependencies.
- Communicates within and outside of the organization to influence leadership to accept new practices, approaches, and concepts.
- Responsible for improving upon existing processes or establishing new processes and systems.
- Perform security compliance scans, vulnerability analysis, and drive identified issues resolution.
- Develop and maintain ATO Body of Evidence artifacts.
- Develop policies and procedures for securing the system infrastructure and applications.
- Performs periodic vulnerability scans of networks to identify security vulnerabilities and provides remediation alternatives and conducts security risk assessments to ensure compliance with corporate security policies and adherence to best practices.
- Translating NIST 800-53 security controls into functional requirements that product teams can implement.
- DoD Secret Clearance with ability to obtain a Top-Secret Clearance.
- Work is 100% on-site and cannot be accomplished remotely.
Qualifications: - Bachelor's Degree in an engineering discipline (Cybersecurity, Computer Science, Electrical, Mechanical, Systems, Software, Physics, etc.) and minimum 4 years of prior relevant experience.
- Graduate Degree and a minimum of 2 years of prior related engineering experience.
- In lieu of a degree, a minimum of 8 years of prior related engineering experience.
- Demonstrated experience in design, development, and fielding of Systems Security Engineering (SSE) systems.
- Experience in drafting Systems Security Engineering Requirements and effectively communicating these requirements with other groups.
- Experience with the Risk Management Framework (RMF) process to include NIST and DoD standards.
- Experience with drafting security documents for various security certifications.
Preferred Additional Skills: - Able to socialize ideas, make recommendations, and gain team consensus.
- Solid understanding of networking.
- Experience or proficiency with Linux administration, Bash scripting, Python, Windows PowerShell, Windows administration, Nessus, Wireshark, Nmap, Elastic Stack (Elasticsearch, Logstash and Kibana (ELK)).
- Excellent understanding of Linux audit and logging system architecture.
- Good understanding of directory services - Active Directory and LDAP.
- Top Secret/SCI clearance or DOD Top Secret with current SSBI within the last 5 years.
- Knowledge of deployment logistics for DoD systems, including transport, setup, and integration in austere or contested environments.
#LI-AM2
