Lead, Info Security Systems Engineer

L3Harris Technologies

. Support an engineering team in defining, designing, implementing, documenting, testing, and sustaining security solutions for National Security Systems and government-customer systems .

Posted 10/15/2026full-timeColorado Springs • Colorado • United StatesSenior💰 $110,500 - $205,500 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudSplunkTypeScript

About the role

Key responsibilities & impact

Support an engineering team in defining, designing, implementing, documenting, testing, and sustaining security solutions for National Security Systems and government-customer systems
Work with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products
Write System Security Plans, Security Control Traceability Matrices, Continuous Monitoring Plans, Security Assessment Plans and Procedures, Security Concept of Operations, and Plans of Action and Milestones
Apply CMMC Level 2/3 and NIST 800-171 requirements to system design, assessment, and continuous compliance
Implement and assess security controls, define baselines and overlays, and verify control implementation
Design and secure mixed, multi-level on-premises environments and cloud-based systems
Create data flow diagrams, interface control documents, and trade studies
Define and manage security architectures and boundaries; develop Configuration Management Plans
Assess and secure IaaS, PaaS, SaaS, containerized, and orchestrated platforms
Implement cloud-native identity and access management, encryption, and key/secrets management controls
Perform application and software supply-chain security testing using SAST, DAST, SCA, SBOM generation, and DevSecOps CI/CD tools
Perform vulnerability management, including triage, disposition, remediation planning, risk acceptance, and mitigation strategies
Support secure software supply-chain integrity and secure-by-design practices using SSDF
Review and secure infrastructure-as-code and develop automated security policies and admission controls
Build automation and quality gates to streamline security reviews and provide engineering feedback
Design and maintain security dashboards and reports for technical and non-technical stakeholders
Apply secure design principles to AI/ML-enabled and agentic capabilities, including least privilege, sandboxing, human approval gates, and immutable audit
Assess and mitigate AI-specific security risks such as prompt injection, insecure agent tool use, supply-chain integrity, and data-handling constraints
This position is performed 100% onsite and cannot be performed remotely
Up to 10% travel is possible

Requirements

What you’ll need

Bachelor’s Degree and minimum 9 years of prior relevant experience, or Graduate Degree and minimum 7 years of prior related experience, or minimum 13 years of prior related experience in lieu of a degree
Active Secret security clearance required
Active TS/SCI highly desired
Experience with NIST Risk Management Framework and NIST publications, including SP 800-37, 800-53, and 800-171
Experience with CNSSI 1253, JSIG, and FIPS
Experience applying CMMC Level 2/3 and NIST 800-171 requirements
Experience implementing and assessing security controls
Experience securing on-premises, cloud-based, mixed, and multi-level security environments
Experience with IaaS, PaaS, SaaS, containerized/orchestrated platforms, and secure workload configuration
Experience with identity and access management, encryption, and key/secrets management in cloud-native environments such as AWS
Experience with SAST, DAST, SCA, SBOM generation, DevSecOps, CI/CD, and application security/STIG compliance
Experience with Fortify, Coverity, Anchore, GitLab, Tenable Nessus, Splunk, or similar tools
Experience with vulnerability management, risk-based prioritization, and remediation planning
Experience with software supply-chain security, SSDF, infrastructure-as-code, security controls as code, and automated policy/admission controls
Experience applying secure design principles to AI/ML-enabled and agentic systems and assessing AI-specific security risks
DoD 8140.03 IASAE Level 2 and cloud security certification preferred
Experience with Model Based Systems Engineering using UML, SysML, or UAF preferred
Experience supporting continuous authorization, OSCAL, zero trust architecture, and AI red-teaming preferred

Benefits

Comp & perks

Health and disability insurance
401(k) match
Flexible spending accounts
Employee Assistance Program (EAP)
Education assistance
Parental leave
Paid time off
Company-paid holidays
9/80 schedule with every other Friday off
Up to 10% travel possible