Senior Cyber Security Engineer

L3Harris; Columbia (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

L3Harris Technologies, Inc. seeks a Senior Specialist, Information Security Systems Engineer to lead architecture, design, and validation of secure systems. You will collaborate with government customers and developers to implement robust security controls throughout the system lifecycle.

The role requires coordinating RMF A&A activities, preparing certification artifacts, and evaluating security architectures for CPI protection in DoD environments. On-site work in a lab setting is required.

Qualifications

• Bachelor’s Degree in a related field required; graduate degree preferred.
• 6+ years of relevant experience; 4+ years with graduate degree; 10+ years without degree.
• Experience with RMF A&A processes for DoD/CPI.
• Experience evaluating embedded systems security per NIST 800-53.
• Ability to prepare Certification and Accreditation documentation.

Responsibilities

• Certification of Cryptographic High Assurance Devices.
• Assess security controls in embedded systems using NIST 800-53.
• RMF accreditation of PIT systems and A&A package processing.
• Prepare BoE packages and RMF documentation for security authorization.
• Collaborate with customers and internal program teams.
• Provide DoD software selection/approval for COTS, GOTS, FOSS.
• Support security engineering activities across lifecycle.
• Work onsite 100% in lab environment; no remote options.

Skills

Crypto devices

RMF A&A

Cyber defense tools

NIST 800-53

Embedded security

Stakeholder collaboration

Education

Bachelor's Degree

Graduate Degree

10+ years experience in lieu of degree

Tools

ACAS

SCC

Job description

L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

L3Harris is the Trusted Disruptor in defense tech. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

Job Title: Senior Specialist, Information Security Systems Engineer

Job Code: 47497

Job Location: Rochester, NY or Columbia, MD

Job Schedule: 9/80: Employees work 9 out of every 14 days - totaling 80 hours worked - and have every other Friday off

About L3Harris Technologies:

L3Harris Technologies is an agile global aerospace and defense technology innovator, delivering end-to-end solutions that meet customers' mission-critical needs. The company provides advanced defense and commercial technologies across space, air, land, sea and cyber domains. L3Harris has approximately $18 billion in annual revenue and 47,000 employees, with customers in more than 100 countries.

Job Description:

Applies current Systems Security Engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks to maintain system security. Works closely with Government customers to ensure that the security protection needs, concerns, and requirements are defined and implemented with appropriate fidelity and rigor, early and in a sustainable manner throughout the life cycle of systems that will allow for the security authorization of the system of interest. Works with systems developers or commercial product vendors in the design and evaluation of state-of-the-art secure systems, networks, and database products. Uses methods such as encryption technology, vulnerability analysis, and security management. Responsible for integration of multiple methods into a cohesive system security perimeter and environment and the policies and procedures necessary to monitor and maintain such an environment. Will prepare Certification and Accreditation documentation, using multiple standards under RMF and derivative processes (DOD 8510, JSTIG, ICD-503, CNSSI 1253), to achieve security authorization of supported systems. Represents program security needs, concerns and requirements at customer meetings.

Essential Functions:

• Certification of Cryptographic High Assurance Devices.

• Experience with High Assurance products, IASRD and SERD requirements.

• Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC.

• Assess security and privacy controls in embedded systems using NIST 800-53.

• Utilize Risk Management Framework (RMF) accreditation and authorization (A&A) processes, including RMF steps 1-4 (categorization, controls selection, control implementation, security assessment) and standard body of evidence (BoE) package development.

• A&A package processing.

• RMF accreditation of Platform IT (PIT) systems.

• Collaborate with customers, internal program teams, and leadership to address needs.

• Provide DoD software selection and approval processes for COTS, GOTS, and FOSS.

• Support security engineering activities, including basis of estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.

• Collaborate with customers, internal program teams, and leadership to address program needs.

• Assist program security in the development of policies and procedures for emerging security technologies.

• Support the evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.

• Work is to be accomplished 100% onsite, in a lab environment, with no options for remote support.

  Qualifications:

• Requires strong knowledge of job area. Typically viewed as having a specialty within discipline. May have broad knowledge of project management. Bachelor’s Degree and minimum 6 years of prior relevant experience. Graduate Degree and a minimum of 4 years of prior related experience. In lieu of a degree, minimum of 10 years of prior related experience

  Preferred Additional Skills:

• Prior or current experience with developing and High Assurance Device certification on embedded systems.

• Prior or current experience with Risk Management Framework A&A on embedded systems.

• Prior or current experience with the development and implementation of System Security Engineering for the protection of CPI throughout the System Development Lifecycle.

• Assess systems for Critical Program Information (CPI).

• Conduct trade studies and develop System Security Engineering requirements.

• Assess threats via attack/countermeasure analysis.

• Conduct Verification and Validation