Specialist, Cyber Intelligence (ISSO)
L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.
About the role
The ISSO is responsible for the information system security controls and ensuring the confidentiality, integrity, and availability of information systems remain at the authorized state. Abides by all applicable information system security guidance to sustain customer information systems In Accordance With (IAW) NIST SP 800-53 and any other government and local directives, instructions, or publications pertaining to the ISS Continuous Monitoring (ConMon) responsibilities.
Responsibilities
- Conducts internal information technology system audits and risk assessments and reports findings and recommendations for corrective actions to management.
- Executes first-level responses and addresses reported or detected incidents.
- Investigates and analyzes all response activities related to cyber incidents.
- Interprets, analyzes, and reports all events and anomalies in accordance with directives, including initiating, responding, and reporting discovered events.
- Safeguards information against unauthorized use, infiltration, exfiltration, modification, destruction, or disclosure of national security information.
- Performs Continuous Monitoring of assigned information systems, including user activity monitoring (auditing) using SIEM tools or the native audit reduction capability of the operating system.
- Initiates, reviews, and remediates vulnerability and compliance scans using industry-approved scanning tools (Nessus, ACAS).
- Reviews and assesses the configuration settings of assigned information systems against the DISA STIG configuration standards.
- Develops and updates documentation in support of obtaining or maintaining an Authority to Operate (ATO) for assigned information systems.
- Attends Change Control Boards (CCB) to review and approve information system change requests.
- Conducts and monitors security awareness training for information system users.
- Responds to and investigates security incidents and violations.
- Maintains appropriate cyber certifications per customer contract.
Requirements
- Bachelor’s Degree and minimum 4 years of prior relevant experience or 2 years post-Secondary/Associates Degree and a minimum of 8 years of prior related experience.
- Graduate Degree and a minimum of 2 years of prior related experience.
- TS/SCI DoD Clearance.
- Minimum Security+ certification required.
Skills
- Experience as an ISSO supporting classified systems under the JSIG, ICD 503, and/or 32 CFR Part 117 Section 18.
- Ability to explain and interpret processes and procedures to others within and outside the job area.
- Practical experience running security compliance scans and interpreting vulnerability scanning results (Nessus, SCAP).
- Experience completing DISA Security Technical Implementation Guidelines (STIG) checklists.
- Experience with Linux/Unix Information System Security requirements, including archiving audit log data.
Schedule
9/80