Senior InfoSec Systems Engineer – RMF & CNSS

Jobtome; Village of Fairport (NY); On-site; USD 93,000 - 172,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid time off

Education assistance

Parental leave

Job summary

L3Harris is seeking an Information Security Systems Engineer to support government-grade security solutions in Rochester, NY. The role focuses on defining, implementing, and sustaining RMF-aligned controls for National Security Systems and enterprise environments.

The candidate will work with developers and vendors, perform risk analyses, and contribute to system accreditation activities while leveraging tools like Fortify, Nessus, and Splunk in a DevSecOps CI/CD context. Onsite work only.

Qualifications

• Bachelor’s Degree and minimum 6 years of prior relevant experience.
• Graduate Degree and a minimum of 4 years of prior related experience.
• In lieu of a degree, minimum of 10 years of prior related experience.

Responsibilities

• Define and implement security controls across systems and networks.
• Prepare System Security Plans and RMF deliverables.
• Support CSOC-style monitoring and incident response using SIEM tooling.
• Collaborate with developers and vendors to ensure STIG and NIST compliance.
• Develop and maintain security configurations for cloud/on-prem environments.

Skills

NIST RMF

Security architecture

DevSecOps

Vulnerability analysis

Splunk

Education

Bachelor’s Degree

Graduate Degree

Experience in lieu of degree

Tools

Fortify/Coverity

GitLab CI/CD

Tenable Nessus

Job description

L3Harris is seeking an Information Security Systems Engineer to support government-grade security solutions in Rochester, NY. The role focuses on defining, implementing, and sustaining RMF-aligned controls for National Security Systems and enterprise environments.

The candidate will work with developers and vendors, perform risk analyses, and contribute to system accreditation activities while leveraging tools like Fortify, Nessus, and Splunk in a DevSecOps CI/CD context. Onsite work only.