Information Systems Security Manager
Orlando, Floride
Job ID 21355L3Harris se fait un devoir de recruter et de former des talents performants qui sont passionnés par ce qu’ils font. Nos employés sont liés par un engagement commun envers leur croissance professionnelle et la mission de nos clients. L3Harris offre un environnement inclusif et engageant conçu pour responsabiliser les employés et encourager un équilibre entre le travail et la vie personnelle. Notre culture repose sur l’importance que nous accordons à nos valeurs, notre dévouement envers nos collectivités et notre engagement envers l’excellence dans tout ce que nous faisons. L3Harris Technologies est l’entreprise perturbatrice de confiance dans l’industrie de la défense. Ayant toujours à l’esprit les besoins essentiels de nos clients, nos employés offrent des solutions technologiques de bout en bout reliant les domaines de l’espace, de l’air, de la terre, de la mer et des cyberdomaines, dans l’intérêt de la sécurité nationale.
Job Description:
Job Title: Lead, Cyber Intelligence
Job Code: 21355
Job Location: Orlando, Florida
Job Schedule: 9/80 - work 9 out of every 14 days, totaling 80 hours worked and every other Friday off
Job Description:
Aerojet-Rocketdyne, an L3Harris Technologies Company, is looking for an Information Systems Security Manager for Department of Defense networks and IT systems. The selected individual will perform technical security control assessments and baseline validations to identify vulnerabilities and control deficiencies as part of a continuous monitoring program anddirect the activities of Information System Security Officers (ISSOs.) This position will be supporting activities at Coleman's Space Coast Integration and Test Facility at Cape Canaveral Space Force Station in Brevard County 25% of the time.
Essential Functions:
- Develop and conduct risk assessment procedures for verification of RMF/Assessment and Authorization (A&A) safeguards to meet various regulatory requirements based upon NIST 800 series guidelines.
- Author and provide oversight of various artifacts supporting RMF package artifacts to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Actions & Milestones (POA&M), Continuous Monitoring (ConMon) Plan, CONOPS, and other RMF BoE artifacts.
- Responsible for analyzing and/or administering security controls for information systems.
- Configuration of change management processes (hardware/software, account Management, Disposition, Assured File Transfers (AFT) and related documentation in accordance with policies and procedures.
- Review audit data of the IS and IS components (technical & physical) for anomalous or unauthorized activities.
- System Administration (Linux/Windows) and Cybersecurity sustainment activities (hardware/software change management, account management, auditing, media protection, file transfers, etc.)
- Interface with internal and external customers, program managers, engineers, etc
- Prepare and conduct general/privileged cybersecurity training and awareness
- Develop, maintain, and execute DoD compliant cybersecurity policies and procedures for primary customer base
Qualifications:
- Bachelor’s Degree and minimum 9 years of prior cybersecurity or cyber intelligence experience. Graduate Degree and a minimum of 7 years of prior cybersecurity or cyber intelligence experience. In lieu of a degree, minimum of 13 years of prior cybersecurity or cyber intelligence experience
Preferred Additional Skills:
- 5+ year of experience working with assessment & authorization processes to include risk management framework (RMF), DIACAP, NISPOM
- Prior ISSO/ISSM experience
- DoD 8570.1 compliant certification (e.g. Security +, CISSP, etc.)or ability to attain within 6 months
- Communications security (COMSEC) experience
- Knowledge of NISPOM Chapter 8 and DAAPM requirements
- Active US government security clearance or ability to attain
- System administrator experience with operating systems: Microsoft Windows, Linux
- Experience with various information system security assessment/hardening tools - SCAP Compliance Checker, ACAS, Nessus
- Working knowledge of WAN/LAN, to include Cisco-based routers, switches, and firewalls
- Experience with NIST 800-53 implementation
- Prior Enterprise Mission Assurance Support Service (eMASS)
- Self-starter with ability to work independently
- Customer service orientation