Senior Associate, Cyber Intelligence (23552)
Senior Associate, Cyber Intelligence (23552)
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
$ 69000 - 128000
1 Vacancy
Job Description
Job Title: Information System Security Officer (ISSO)
Job Code: 23552
Job Location: Rochester NY
Job Description:
An experienced Information System Security professional with extensive expertise in cybersecurity and a strong ability to operate effectively under the general supervision of the Information System Security Manager (ISSM). The ideal candidate will be able to work collaboratively with Information System Owner(s) systems engineers program management and engineering teams to communicate interpret and implement cybersecurity processes practices and procedures across the organization. The individual filling this role will be expected to develop a deep understanding of the complexities of information system security and plays a critical role in aligning cybersecurity initiatives with the broader goals of the programs they support and the organization.
Proactively recommends and drives enhancements to information systems security protocols and related processes to improve overall security posture. Takes full responsibility for the daytoday security operations of multiple systems ensuring that each remains compliant with established security standards and frameworks. The candidate is wellversed in information technology information system security and the Risk Management Framework (RMF) applying this knowledge to manage and mitigate risks track system vulnerabilities and ensure the continuous safeguarding of organizational assets.
Supports the identification and implementation of best practices for security governance risk management and compliance (GRC) within the organization. Assists in the development of security policies procedures and documentation ensuring that all activities adhere to industry standards and regulatory requirements. Demonstrates a proactive approach to security incident response and recovery fostering a culture of security awareness and continuous improvement across all information systems.
Essential Functions:
- Authoring and maintaining Body of Evidence (BOE) artifacts to support Assessment & Authorization (A&A) of assigned systems in compliance with the Risk Management Framework (RMF) and applicable security standards
- Conducting comprehensive information system audits to assess compliance with security policies and regulations
- Performing detailed security control assessments to verify the effectiveness of security measures and identify gaps
- Overseeing and managing the configuration of information systems ensuring compliance with security baselines and best practices
- Collaborating with the IT organization to develop and update device and system hardening guides based on NIST guidelines industry standards and customerspecific requirements
- Conducting periodic and adhoc hardware/software inventory assessments to ensure proper asset tracking and vulnerability management
- Implementing and overseeing continuous monitoring activities to detect and mitigate security threats and vulnerabilities on assigned information systems
- Remediating security control deficiencies through collaboration with crossfunctional teams and tracking resolution progress
- Investigating and responding to security incidents including data spills malware infections and other events compromising system integrity and confidentiality
- Assisting the Information Systems Security Manager (ISSM) in meeting their duties including risk assessments compliance tracking and security documentation
- Providing security awareness training and guidance to system administrators and other staff to ensure adherence to security best practices
- Coordinating vulnerability scanning patching and updates to ensure systems remain secure and up to date
Qualifications:
- Bachelors Degree and a minimum of 2 years of prior related experience. Graduate Degree or equivalent with 0 to 2 years of prior related experience.
- TS/SCI security clearance
- Minimum DoD 8570 Baseline Certification IAM Level I (i.e. Security CE or the ability to obtain within 6 months of hire)
Preferred Additional Skills:
- 2 years of experience as an Information System Security Officer (ISSO) supporting or managing cybersecurity for classified systems ensuring compliance with regulatory requirements and organizational security standards
- TS/SCI security clearance with CI Polygraph
- Proven experience in developing managing and providing evidence to close Plan of Actions and Milestones (POA&Ms) related to Assessment & Authorization (A&A) and project management processes ensuring timely and accurate remediation of security vulnerabilities
- Collaborative team player with the ability to effectively communicate and contribute to crossfunctional teams in a dynamic fastpaced environment
- Exceptional time management skills with a demonstrated ability to prioritize tasks manage multiple assignments and meet deadlines in complex project settings
- Extensive experience with building configuring and maintaining networking equipment including routers switches and firewalls ensuring proper system functionality and security posture
- Indepth experience with both Microsoft and Linuxbased operating systems supporting system administration tasks and maintaining security controls across diverse environments
- Skilled in reviewing and analyzing logs from various sources including workstations servers firewalls and Intrusion Prevention/Detection Systems (IPS/IDS) to identify security events and anomalies
- Handson experience with DISA Security Technical Implementation Guides (STIGs) and SCAP Compliance Checker ensuring system configurations meet established security baselines
- Expert in interpreting vulnerability scanning results from tools such as Nessus ACAS and others assessing risk levels and assisting in remediation efforts to mitigate identified vulnerabilities
- Selfmotivated with a high level of personal initiative to continuously learn and acquire new skills staying up to date with the latest cybersecurity trends tools and technologies
- Experience with ServiceNow CRM leveraging the platform for incident management workflow automation and service desk support
- Proficient in supporting DAAPM JSIG and ICD 503based authorization and accreditation processes ensuring compliance with government security requirements for classified systems
In compliance with pay transparency requirements the salary range for this role in New York State is $69000 $128000. This is not a guarantee of compensation or salary as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits including healthy and disability insurance 401 (k) match flexible spending accounts EAP education assistance parental leave paid time off and companypaid holidays. The specific programs and options available to an employee may vary depending on date of hire schedule type and the applicability of collective bargaining agreements.
Required Experience:
Senior IC
Employment Type
Full Time
