Specialist, Information Security Systems Engineering

Socket.dev; Salt Lake City (UT); On-site; USD 110,000 - 150,000; Full time

Job summary

L3Harris Technologies in Salt Lake City, UT seeks a Specialist in Information Security Systems Engineering to support RMF-based accreditation and compliance for mission-critical systems.

You will apply RMF, NIST SP 800-53, and related standards to ensure DoD and national security requirements are met, collaborating with systems, software, and hardware engineers to implement security controls and authorizations.

Qualifications

• Bachelor’s degree in cybersecurity or related field with 4+ years of experience.
• DoD 8140/8570-compliant certification or ability to obtain within 6 months of hire.
• Experience applying RMF and NIST SP 800-53/security controls in DoD environments.

Responsibilities

• Execute RMF lifecycle activities from categorization to continuous monitoring.
• Develop, maintain, and review RMF artifacts (SSPs, SARs, POA&Ms).
• Implement and validate security controls through DoD engineering teams.
• Interface with AOs and assessors to support authorization.
• Track compliance status, risks, and remediation with leadership.
• Travel up to 10% as needed; DoD Secret Clearance required.

Skills

RMF lifecycle

NIST SP 800-53

ATO processes

Technical writing

Cross-functional teamwork

Security controls

DoD/SECURITY

Education

Bachelor’s degree in cybersecurity

Graduate degree in related field

8 years experience in lieu of degree

Tools

eMASS

XACTA

Job description

Job Title: Specialist, Info Security Systems Engineering

Job Code: 44669

Job Location: Salt Lake City, UT

Job Schedule: 9/80: employee's work 9 out of every 14 days - totaling 80 hours worked - and have every other Friday off

Job Description:

As a Specialist, Information Security Systems Engineering at L3Harris Technologies, you will support the security accreditation and compliance of mission-critical communication systems. This role focuses on applying the Risk Management Framework (RMF) and related cybersecurity standards to ensure systems meet DoD and national security requirements.

You will work closely with systems, software, and hardware engineers to integrate security controls, develop authorization artifacts, and support system certification and accreditation activities. This position is ideal for engineers with a strong foundation in cybersecurity governance, risk, and compliance (GRC) who are interested in contributing to high-assurance defense systems.

Essential Functions:

• Execute and support RMF lifecycle activities (categorization, control selection, implementation, assessment, authorization, and continuous monitoring)
• Develop, maintain, and review RMF documentation (e.g., SSPs, SARs, POA&Ms, Security Plans)
• Interpret and apply security controls from NIST SP 800-53, CNSSI 1253, and related guidance
• Support implementation and validation of Security Technical Implementation Guides (STIGs) and other configuration baselines
• Collaborate with cross-functional engineering teams (systems, software, hardware) to ensure security requirements are properly implemented
• Interface with internal stakeholders, Authorizing Officials (AOs), and external assessors to support authorization efforts
• Track and report compliance status, risks, and remediation activities to program leadership
• Contribute to continuous monitoring strategies and ongoing system compliance
• Travel up to 10% as needed
• Must have a DoD Secret Clearance

Qualifications:

Bachelor’s degree in cybersecurity, computer science, information systems, or related field with minimum 4 years of relevant experience, or Graduate degree in a related field with 2 years of relevant experience, or in lieu of a degree, 8 years of relevant experience

One DoD 8140 / 8570-compliant certification (e.g., Security+, CISSP, SSCP, GSEC), or ability to obtain within 6 months of hire

Preferred Skills:

• Exposure to cryptographic systems, FIPS 140-3, or NSA certification processes
• Experience with high-assurance or classified systems
• Hands-on experience executing RMF within DoD environments
• Familiarity with tools such as eMASS or XACTA
• Experience applying NIST SP 800-53 security controls and STIGs
• Experience supporting Authority to Operate (ATO) processes
• Strong technical writing and documentation skills
• Understanding of networking concepts (TCP/IP, network architecture, boundary defense)
• Experience working with embedded systems or communications systems
• Familiarity with Agile or DevSecOps environments
• Experience working in cross-functional engineering teams
• Familiarity with TEMPEST, Anti-Tamper, or related system security disciplines
• Experience supporting government customers in a SETA/A&AS role
• Additional certifications (CISM, CISA, CEH, GIAC, etc.)
• Active TS/SCI clearance or ability to obtain