Lead Security Operations and Incident Response Engineer

L3Harris Technologies; Greenville (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

L3Harris Technologies in Greenville, TX is seeking a Lead, Information Security Systems Engineer to direct incident response and security operations across AWS, data centers, and corporate environments. You will lead monitoring, investigation, detection engineering, and risk escalation to protect the confidentiality, integrity, and availability of services.

The role requires strong SIEM experience, cloud security, and experience coordinating remediation actions, with potential travel and on-call

Qualifications

• Active US Secret security clearance or higher.
• Bachelor’s Degree and minimum 9 years of prior relevant experience.
• Graduate Degree and a minimum of 7 years of prior related experience.
• In lieu of a degree, a minimum of 13 years of prior related experience.
• Current in at least one of the following; CISSP, CISM, CCSP, GCIH, GCIA, CySA+, Security+, or comparable DoD 8140 certification.
• Minimum 8 years of security operations, incident response, or security engineering experience.
• Demonstrated experience operating or engineering a SIEM platform, developing detection rules, validating log ingestion, and tuning alerts.
• Experience supporting hybrid-cloud environments, including AWS and on-premises data-center infrastructure.

Responsibilities

• Establish and maintain security information and event management operations, including monitoring, tuning, and dashboards.
• Monitor, triage, investigate, document, and coordinate response to security events across AWS, datacenter, network, endpoint, and corporate environments.
• Develop and maintain incident-response plans, escalation paths, severity criteria, playbooks, runbooks, and after-action reports.
• Coordinate remediation tracking for vulnerabilities, security findings, and incident corrective actions.
• Produce security-operations metrics, risk reports, and stakeholder briefings; maintain documentation for audit readiness and continuous monitoring.

Skills

Security clearance

Incident response

Hybrid cloud

AWS

SIEM

Threat hunting

Disaster recovery

Policy compliance

Education

Bachelor’s degree

Graduate degree

Experience-based equivalent

Tools

Splunk

Wazuh

SysAid

AWS security services

Job description

L3Harris Technologies in Greenville, TX is seeking a Lead, Information Security Systems Engineer to direct incident response and security operations across AWS, data centers, and corporate environments. You will lead monitoring, investigation, detection engineering, and risk escalation to protect the confidentiality, integrity, and availability of services.

The role requires strong SIEM experience, cloud security, and experience coordinating remediation actions, with potential travel and on-call