Lead, Information Security Systems Engineer

Company: L3Harris Technologies
Location: Clifton
Posted on: June 18, 2020

Job Description:

Job DescriptionClifton, NJ Essential Functions: * Provide Information Systems Security Engineering support and technical execution of information security activities associated with the Assessment and Authorization (A&A) of NIST Risk Management Framework (RMF) hardened information systems. * Ensure RMF Information Security requirements and Program Protection requirements are addressed in all phases of the System Development Lifecycle (SDLC). * Experience in writing and managing RMF body of evidence documents (e.g., System Security Plan (SSP), Security Compliance Traceability Matrix (SCTM), Risk Assessment Report (RAR), Continuous Monitoring (ConMon) Plan, and Security Assessment Plans and Procedures (SAPP). * Strong understanding of engineering processes, concepts and information security systems engineering principles (NIST SP 800-160 Vol1). * Perform functional analysis, timeline analysis, detailed trade studies, requirements derivation and allocation, and interface definition studies to translate customer Information Security requirements into hardware and software specifications. * Responsible for developing security overlays, data flow diagrams, internal requirements, CONOPs and interface control documents from customer / product requirements. * Provide Information Assurance technical leadership to development teams at internal and external gate reviews such as technical baseline reviews and design reviews. * Work closely with Program Managers, Systems Engineering and other engineering disciplines. * Brief senior management on all aspects of Security Engineering. * Identify security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives (hardware, software, cross-domain solutions, cryptographic devices, firewalls, intrusion detection systems, anti-virus systems and software deployment tools). * Conduct complex security architecture analysis to evaluate and mitigate risks. * Self-motivation, able to work well independently and within inter-disciplinary engineering teams. * Explain technical security needs to non-security team members in manner that facilitates cross-functional design activities. Qualifications: * Bachelor's Degree and minimum 9 years of prior relevant experience; Graduate Degree and a minimum of 7 years of prior related experience. * DoD 8570.01-M IAT Level 2 certification (e.g. CCNA-Security, CySA+, GISCP, GSEC, Security + CE, or SSCP). * Active Secret clearance. Preferred Additional Skills: * Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC. * Moderate understanding of vulnerability analysis tools such as AppInspect or Tenable NESSUS Security products. * Experience writing Basis of Estimate documents. * Experience supporting Business Development activities. * Experience in the content development and administration of SEIM/audit reduction tools (e.g., Splunk). * Foundational knowledge of Layer 3 architecture and diagramming within Visio (or equivalent). * Basic understanding of routing and switching as employed in telecommunications and network traffic. * General knowledge of common threats to information systems and how compromise would damage system integrity. * System testing and evaluation methods and RMF assessment methodology & process. * DoD 8570.01-M IAT Level 3 certification (e.g. CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH). * Experience with Model Based System Engineering (UML, SysML, DoDAF). * Experience with application of STIGs. * Experience with DOORS requirement management software. * Active TS or TS/SCI is highly desired.

Keywords: L3Harris Technologies, Clifton , Lead, Information Security Systems Engineer, IT / Software / Systems , Clifton, New Jersey