Classified Cyber Security Sr - E3

Lockheed Martin; Littleton (CO); On-site; USD 96,000 - 178,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Flexible work arrangements

401(k) match

Paid time off

Parental Leave

Life Insurance

Short-Term Disability

Long-Term Disability

Job summary

Lockheed Martin in Colorado is seeking an Information Assurance Engineer to ensure compliance with government regulations and information security guidelines across the program lifecycle. You will perform risk assessments, steward RMF artifacts, and coordinate certification and accreditation activities with stakeholders.

The role requires active DoD 8570 IAM Level III certification, DoD 8570 IAT Level II, and a strong background in IT security, vulnerability management, and applying NIST RMF

Qualifications

• Active DoD 8570 IAT Level II certification or higher.
• Active DoD 8570 IAM Level III certification.
• Working experience in IT security, access controls, vulnerability management, and configuration management.
• Strong working knowledge of NIST guidelines and the RMF.

Responsibilities

• Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines.
• Creates, maintains and submits information system security documents and reports to regulatory agencies.
• Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities.

Skills

RMF knowledge

IAM Level III

Risk assessment

Stakeholder communication

Vulnerability management

Education

Bachelor's degree in a related discipline

Job description

Standard Job Description
Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Standard Job Description
Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the‑art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Basic Qualifications

• United States Government Security Clearance required.
• Active DoD 8570 IAT Level II certification or higher.
• Working experience in IT security, access controls, vulnerability management, and configuration management.
• Familiarity with vulnerability scanners, SIEM systems, antivirus solutions, and system security configuration management tools.
• Strong working knowledge of NIST guidelines and the Risk Management Framework (RMF).
• Experience with developing, reviewing and maintaining RMF artifacts.
• Ability to work and communicate with various stakeholders to ensure cybersecurity compliance is maintained and proactively managed through a program's lifecycle.

Desired Skills

• Strong written and verbal communication to explain security risks to non-technical stakeholders and leadership.
• Proven working experience and ability to obtain and maintain system authorizations throughout their lifecycle.
• Hands- on experience with ICD 503 or JSIG.
• DoD 8570 IAM Level III certification.
• Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education, with 5 years of professional experience; or 3 years of professional experience with a related Masters degree

Pay Information
Full-Time Salary Range: $95900.00 - $178100.00
At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.
The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.Benefits offered:Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full‑time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.