Classified Cyber Security Stf - E4

Lockheed Martin; Orlando (FL); On-site; USD 105,000 - 195,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Flexible work arrangements

401(k) match

Paid time off

Holidays

Parental Leave

EAP

Education Assistance

Life Insurance

Short-Term Disability

Long-Term Disability

Job summary

Lockheed Martin Missiles and Fire Control's Security team seeks a Lead Information Systems Security Officer (ISSO) to oversee day-to-day information system security operations in Orlando, FL. You will ensure compliance with RMF, profiles, and customer requirements while maintaining the integrity of critical systems.

You will collaborate with the security team, program, and government customers to perform authorization activities, conduct risk assessments, and provide security training.

Qualifications

• Ability to obtain and maintain a Secret clearance (Interim Secret required to start).
• Bachelor's degree in Cybersecurity (or related discipline) from an accredited college with related professional experience, or Master's degree in Cybersecurity
• DoD 8570/8140 IAT Level III baseline certification (CCNA-Security, CySA+ , GICSP, GSEC, Security+ CE, CND, SSCP)
• Hands on technical experience with industry standard Information Assurance tools (Splunk, Nessus/Tenable/ACAS, STIGViewer/SCAP Compliance Checker/eSTIG, McAfee ePO, McAfee DLP)
• Experience with developing, reviewing, and maintaining RMF artifacts

Responsibilities

• Oversee day-to-day information system security operations including assisting the ISSM on all technical security matters.
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily RMF.
• Participating in auditing and continuous monitoring of the IS.
• Review and oversee RMF Package authorizations.
• Upkeep, monitor, analyze, and respond to security events.
• Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M).
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
• Ensure configuration management for security-relevant IS software, hardware, firmware, and system documentation.
• Ensure all information systems lifecycle management documentation are maintained.
• Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
• Assist and conduct security IS education and training.
• Participate in internal/external security audits/inspections; performs risk assessments.
• Assist in conducting investigations of computer security violations and incidents.
• Ensure proper protection and corrective measures are taken when an incident or vulnerability has been discovered.
• Implement and enforce Information Security Policies and Procedures together with ISSM and CPSO.

Skills

RMF artifacts

Information Assurance

Risk assessments

Security policies

Education

Bachelor's in Cybersecurity

Master's in Cybersecurity

Tools

Splunk

Nessus

ACAS

McAfee ePO

McAfee DLP

StigViewer

SCAP

Job description

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Long Description

Lockheed Martin Missiles and Fire Control's (LM MFC) Security team seeks security professionals to protect critical government capabilities that enable warfighter supremacy against peer and near‑peer adversaries. In this role you will safeguard sensitive information and warfighting systems essential to U.S. and allied interests, working alongside other security experts and military personnel to provide a secure operating environment. You will leverage your education, experience, and Lockheed Martin resources to keep these capabilities protected in a fast‑paced, real‑world setting. Classified Cybersecurity helps secure state-of-the-art engineering and manufacturing systems by applying cutting edge cybersecurity principles, rising to the challenge of building a more secure world for the warfighter. This position will partner with the security team, program, and government customers to perform as an Information Systems Security Officer (ISSO) in Orlando, FL.

What You Will Be Doing

As the Lead ISSO, you will be responsible for overseeing day-to-day information system security operations, ensuring compliance with internal and customer security requirements, and maintaining the security and integrity of our systems.

Responsibilities Include, But Are Not Limited To

• Oversee day-to-day information system security operations including assisting the ISSM on all technical security matters.
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
• Participating in auditing and continuous monitoring of the IS.
• Review and oversee RMF Package authorizations.
• Upkeep, monitor, analyze, and respond to security events.
• Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M).
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
• Ensure configuration management (CM) for security-relevant IS software, hardware, firmware, and system documentation.
• Ensure all information systems lifecycle management documentation are maintained.
• Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
• Assist and conduct security IS education and training.
• Participate in internal/external security audits/inspections; performs risk assessments.
• Assist in conducting investigations of computer security violations and incidents.
• Ensure proper protection and corrective measures are taken when an incident or vulnerability has been discovered.
• Implement and enforce Information Security Policies and Procedures together with ISSM and CPSO.

Basic Qualifications

• Ability to obtain and maintain a Secret clearance (Interim Secret required to start)
• Bachelor's degree in Cybersecurity (or related discipline) from an accredited college with related professional experience, or Master's degree in Cybersecurity
• DoD 8570/8140 IAT Level III baseline certification (CCNA-Security, CySA+ **, GICSP, GSEC, Security+ CE, CND, SSCP)
• Hands on technical experience with industry standard Information Assurance tools (Splunk, Nessus/Tenable/ACAS, STIGViewer/SCAP Compliance Checker/eSTIG, McAfee ePO, McAfee DLP)
• Experience with developing, reviewing, and maintaining RMF artifacts

Desired Skills

• Previous experience supporting classified information systems
• Currently working in environment supporting IC customers
• Experience implementing new and complex technologies at multiple classification levels within large environments and at an Enterprise level
• Knowledge of system accreditation requirements and NIST 800-53 (DAAG/JSIG) RMF implementation
• Experience implementing/validating STIG application, system hardening, analysis, and vulnerability management
• Knowledge of other security disciplines and how they impact and interact with information system security
• Demonstrated technical experience in Windows, Linux operating systems and command line use
• Experience with classified information system auditing and investigations
• Experience implementing new and complex technologies at multiple classification levels within large environments and at an Enterprise level
• Experience implementing new and complex technologies at multiple classification levels within large environments and at an Enterprise level
• Experience with scripting languages
• Ability to perform technical assessments for systems being presented to the government for authorization
• Ability to manage multiple projects in dynamic, demanding environments

Pay Information

Full-Time Salary Range: $104900.00 - $194700.00

Benefits offered:

• Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.
• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.