Classified Cyber Security Sr - E3

Lockheed Martin Corporation; King (AR); On-site; USD 96,000 - 178,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) match

Paid time off

Job summary

Lockheed Martin Corporation is seeking a seasoned Information Security professional to oversee RMF-based security operations, conduct risk assessments, and ensure regulatory compliance. The role emphasizes architecture, certification planning, and ongoing vulnerability management within a DoD-aligned program.

Required clearance and IAM certifications, plus experience with security tooling and RMF artifacts, position you to lead audits, investigations, and security program administration across

Qualifications

• Clearance required.
• DoD 8570 IAM Level I certification or higher.
• Experience with IS auditing and investigations.
• Knowledge of the A&A process.
• Experience with industry standard Information Assurance tools.
• Knowledge of RMF and requirements to review and maintain artifacts.

Responsibilities

• Oversee day-to-day information system security operations including auditing the IS, hardware, and software implementations and RMF package authorizations.
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily RMF.
• Upkeep, monitor, analyze, and respond to network and security events.
• Document compliance actions with the ISSM to address non-compliance in the allotted time frame.
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
• Participate in internal/external security audits/inspections; performs risk assessments.
• Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle.
• Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
• Ensure configuration management (CM) for security relevant IS software, hardware, and firmware is maintained and documented.
• Assist in conducting investigations of computer security violations and incidents, reporting as necessary.
• Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
• Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and CPSO.

Skills

Clearance required

DoD 8570 IAM Level I certification or?

Experience with IS auditing andInvest

Knowledge of the A&A process

Experience with industry standard IA工具

Knowledge of RMF and artifacts

Education

Bachelor's degree in a related discipline

Tools

DoD 8570 IAM Level III certification

Job description

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

• Oversee day-to-day information system security operations including auditing the IS, hardware, and software implementations and RMF package authorizations.
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
• Upkeep, monitor, analyze, and respond to network and security events.
• Document compliance actions with the ISSM to address non-compliance in the allotted time frame.
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
• Participate in internal/external security audits/inspections; performs risk assessments.
• Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle.
• Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
• Ensure configuration management (CM) for security relevant IS software, hardware, and firmware is maintained and documented.
• Assist in conducting investigations of computer security violations and incidents, reporting as necessary.
• Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
• Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and CPSO.

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

• Oversee day-to-day information system security operations including auditing the IS, hardware, and software implementations and RMF package authorizations.
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
• Upkeep, monitor, analyze, and respond to network and security events.
• Document compliance actions with the ISSM to address non-compliance in the allotted time frame.
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
• Participate in internal/external security audits/inspections; performs risk assessments.
• Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle.
• Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
• Ensure configuration management (CM) for security relevant IS software, hardware, and firmware is maintained and documented.
• Assist in conducting investigations of computer security violations and incidents, reporting as necessary.
• Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
• Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and CPSO.

Basic Qualifications

• Clearance required
• DoD 8570 IAM Level I certification or higher
• Experience with IS auditing and investigations
• Knowledge of the A&A process
• Experience with industry standard Information Assurance tools
• Knowledge of RMF and requirements to review and maintain artifacts

Desired Skills

• Experience within IA repository tool suites
• Experience obtaining and maintaining system ATOs
• Knowledge of ICD 503/JSIG, DAAPAM, NIST SP 800-53
• DoD 8570 IAM Level III certification
• Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education, with 2 years of professional experience; or no experience required with a related Masters degree

Pay Information

Full-Time Salary Range: $95900.00 - $178100.00

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered:

• Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.
• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.