Specialist, Info Security Systems Engineer

Job Description

The successful candidate will support a highly motivated engineering team in defining, designing, implementing, documenting, testing and sustaining security solutions on National Security Systems, or other systems engineered for our government customers, using current standards within National Institute of Standards & Technology (NIST) Risk Management Framework, Special Publications 800-37, 800-53, 800-171, and other NIST publications; Committee on National Security Systems Instruction (CNNSI) 1253, Joint SAP Implementation Guide (JSIG), and Federal Information Processing Standards (FIPS) to certify and achieve system accreditations. The candidate will work with system developers or commercial product vendors in the design and evaluation of state‑of‑the‑art secure systems, networks, and database products, using methods such as encryption technology, vulnerability analysis and security management.

Essential Functions

• Exercise skills in NIST Risk Management Framework (RMF) and related NIST publications, including writing System Security Plans, Security Control Traceability Matrix, Continuous Monitoring Plan, Security Assessment Plans & Procedures, Security Concept of Operations, and Plan of Action and Milestones.
• Implement and assess security controls, including writing system security categorization memoranda, recommending appropriate security control overlays, defining security control baselines, applying controls to computing/network nodes, and verifying implementation.
• Assist in systems/software engineering functions: create data flow diagrams, interface control documents, perform trade studies, conduct Static Application Security Testing (SAST) for Application Security and Development Secure Technical Implementation Guide (STIG) compliance using tools such as Fortify/Coverity and GitLab within a DevSecOps CI/CD pipeline, and generate summary reports.
• Define and manage systems/security architectures, including system security boundaries, vulnerability management, and risk mitigation/remediation strategies for networks, systems, applications, and new technology initiatives (hardware, software, firewalls, intrusion detection systems, anti‑virus systems, and software deployment tools); implement IaaS, PaaS, SaaS solutions in cloud environments and develop Configuration Management Plans (CMP).
• Define and manage systems/security architectures for on‑premises data‑center systems and ultimately deploy to secure cloud‑based systems, configuring and using defense and assessment tools specific to each environment type.
• This position is performed 100% onsite and cannot be performed remotely.
• Up to 10% travel is possible.

Qualifications

• Bachelor’s Degree and minimum 4 years of prior relevant experience.
• Graduate Degree and a minimum of 2 years of prior related experience.
• In lieu of a degree, minimum of 8 years of prior related experience.
• Must have active Top Secret security clearance.
• Active TS/SCI with polygraph is highly desired.
• DoD 8140.03 IASAE Level 2 certification.

Preferred Additional Skills

• Perform Model Based System Engineering (UML, SysML, UAF).
• Configure/operate vulnerability analysis tools such as Tenable Nessus security products.
• Develop dashboards, configure rules, and operate/administer SIEM/audit‑reduction tools (e.g., Splunk).

Schedule

9/80 – Employees work 9 out of every 14 days, totaling 80 hours, with every other Friday off.

Pay

Salary range for Virginia: $92,500‑$171,500 (final offer may vary based on experience, location, and other factors).

Benefits

L3Harris offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, Employee Assistance Program, education assistance, parental leave, paid time off, and company‑paid holidays. Specific programs may vary depending on hire date, schedule type, and collective bargaining agreements.