InfoSec Systems Engineer (RMF, CNSSI, TS/SCI) – Onsite

L3Harris Technologies; City of Rochester (NY); Presencial; USD 93 000 - 172 000; Tempo integral

Resumo da oferta

L3Harris Technologies in Rochester, NY is seeking an Information Security Systems Engineer to define, implement, and sustain security solutions for national security systems, using RMF, NIST SP 800-53, 800-171, and related guidelines.

The role emphasizes collaboration with developers and vendors, development of security documentation, and assessment of vulnerabilities, with the position being 100% onsite.

Qualificações

• Bachelor’s Degree and minimum 6 years of prior relevant experience.
• Graduate Degree and a minimum of 4 years of prior related experience.
• In lieu of a degree, minimum of 10 years of prior related experience.
• Must have active TS/SCI Security Clearance.
• DoD 8140.03 IASAE Level 1 or 2 certification.

Responsabilidades

• Write System Security Plans, Security Control Traceability Matrix, Continuous Monitoring Plan, Security Assessment Plans & Procedures, and other RMF artifacts.
• Implement and assess security controls on systems to meet security baselines and overlays.
• Perform SAST for STIG compliance using Fortify/Coverity and GitLab in a DevSecOps CI/CD pipeline; generate summary reports.
• Define/manage system/security architectures for on-prem and cloud environments; implement defense tools and vulnerability management.
• Collaborate with developers and vendors to design secure systems and achieve accreditation.

Conhecimentos

RMF knowledge

NIST standards

CI/CD pipelines

Vulnerability analysis

Security documentation

Formação académica

Bachelor’s Degree with 6+ years

Graduate Degree with 4+ years

10 years experience in lieu of degree

Ferramentas

Fortify

Coverity

GitLab

Tenable Nessus

Splunk

Descrição da oferta de emprego

L3Harris Technologies in Rochester, NY is seeking an Information Security Systems Engineer to define, implement, and sustain security solutions for national security systems, using RMF, NIST SP 800-53, 800-171, and related guidelines.

The role emphasizes collaboration with developers and vendors, development of security documentation, and assessment of vulnerabilities, with the position being 100% onsite.