Senior InfoSec Systems Engineer: RMF & Cloud Security

L3Harris Technologies, Inc.; Colorado Springs (CO); Presencial; USD 111 000 - 206 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

401(k) match

Flexible spending accounts

Employee assistance program

Education assistance

Parental leave

Paid time off

Company-paid holidays

Resumo da oferta

L3Harris Technologies in Colorado Springs is seeking a Lead, Info Security Systems Engineering to join a highly skilled team responsible for designing, implementing, and sustaining security solutions for national security systems in compliance with RMF, NIST, CNNSI, JSIG, and FIPS.

The role focuses on secure architectures, vulnerability management, IA, identity and access controls, and secure software/supply-chain practices within a DevSecOps environment, onsite with up to 10% travel.

Qualificações

• Bachelor’s Degree and minimum 9 years of prior relevant experience.
• Active Secret security clearance; TS/SCI highly desired.
• DoD 8140 IASAE Level 2 or cloud security certification preferred.
• Experience with RMF, NIST 800-53/800-171, and CNNSI/JSIG guidance.

Responsabilidades

• Define, design, implement, document, test, and sustain security solutions for National Security Systems and government customers.
• Apply RMF, NIST 800-37/53/171 and related controls to system design and operations.
• Create SSPs, RMF artifacts, continuous monitoring, and security plans.
• Assess and secure IaaS, PaaS, SaaS, and cloud-native environments.
• Lead vulnerability management, SAST/DAST, SBOM, and security testing in CI/CD.
• Develop secure software supply chain, IaC safeguards, and policy-as-code.

Conhecimentos

RMF knowledge

NIST RMF

Security architecture

Formação académica

Bachelor’s Degree

Ferramentas

Tenable Nessus

Splunk

GitLab Security Dashboard

Descrição da oferta de emprego

L3Harris Technologies in Colorado Springs is seeking a Lead, Info Security Systems Engineering to join a highly skilled team responsible for designing, implementing, and sustaining security solutions for national security systems in compliance with RMF, NIST, CNNSI, JSIG, and FIPS.

The role focuses on secure architectures, vulnerability management, IA, identity and access controls, and secure software/supply-chain practices within a DevSecOps environment, onsite with up to 10% travel.