Associate IT Security

L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

L3Harris is the Trusted Disruptor in defense tech. With customers’ mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

About the role

L3Harris is seeking a Security Operations Center Associate Engineer to support the monitoring and protection of information technology systems and networks for the FTI program. This position will monitor security alerts, investigate potential cybersecurity incidents, perform initial analysis, and escalate threats in accordance with established security procedures. The role will collaborate with cybersecurity, information technology, engineering, and program teams to support the detection and response to security threats.

What the role will involve

• Monitor security alerts and events using Security Information and Event Management (SIEM) platforms and other cybersecurity monitoring tools.
• Perform initial analysis and triage of suspected cybersecurity incidents, including reviewing alerts, logs, network activity, and endpoint events.
• Investigate suspicious activity and potential security incidents and escalate appropriately based on established incident response procedures.
• Correlate security events from multiple sources to identify potential threats, attack patterns, and indicators of compromise.
• Document security incidents, investigations, findings, and response activities accurately and in a timely manner.
• Support incident response activities, including containment, remediation, recovery, and post-incident documentation.
• Monitor network, endpoint, identity, and application security events for indicators of unauthorized access or malicious activity.
• Assist with vulnerability identification, tracking, remediation, and reporting activities.
• Maintain and update security monitoring rules, use cases, dashboards, and alert documentation, as applicable.
• Collaborate with cybersecurity, information technology, engineering, and program teams to investigate and resolve security events.
• Stay informed about emerging cybersecurity threats, attack techniques, vulnerabilities, and defensive security practices.
• Work on-site in Bangalore, India, with 0% routine travel anticipated.
• Obtain and maintain the applicable PCC security clearance as a condition of employment.

What you’ll bring:

• Bachelor’s degree in cybersecurity, information technology, computer science, information security, or a related technical discipline, with 2 years of prior related experience.
• In lieu of a degree, a minimum of 4 years of prior related experience is required.
• Knowledge of cybersecurity fundamentals, including security monitoring, incident response, threat detection, network security, endpoint security, and access control.
• Familiarity with SIEM platforms, security monitoring tools, network monitoring technologies, and endpoint security solutions.
• Familiarity with common network protocols, operating systems, authentication technologies, and information technology infrastructure.
• Ability to analyze security alerts and technical logs and identify potentially malicious or unauthorized activity.

Preferred Additional Skills:

• Strong communication and interpersonal skills
• Teamwork and collaboration
• Problem-solving skills
• Time management
• Adaptability and quick learning ability
• Proficiency in Microsoft Office, including MS Excel

About us