Classified Cybersecurity ISSO — RMF Expert

Lockheed Martin; Cape Canaveral, FL; On-site; USD 71,000 - 131,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) match

Paid time off

Flexible work arrangements

Job summary

Lockheed Martin Space seeks a Classified Cybersecurity ISSO to support FBM, located in Cape Canaveral, FL. The role involves daily cybersecurity operations, RMF-based administration, and implementing security requirements for classified and unclassified systems.

The position requires a current DoD Secret clearance with potential to obtain Top Secret, familiarity with STIGs, vulnerability scanning, and creating authorization packages. Strong documentation and regulatory reporting are essential.

Qualifications

• DoD Secret clearance with ability to obtain Top Secret clearance.
• Knowledge of DISA STIGs and security scanning tools.
• Experience in information system auditing.
• Familiar with RMF artifacts and security documentation.

Responsibilities

• Carry out technical administration of an information system per RMF and security policies.
• Upkeep, monitor, and respond to network and security events.
• Document compliance actions and address non-compliance with ISSM planning.
• Ensure systems are operated, maintained, and disposed of per security plans.
• Audit systems using vulnerability scanners and STIG analysis tools.
• Create and submit information system security reports to regulators.

Skills

RMF knowledge

Security auditing

Information security governance

Risk assessment

Education

DoD 8570 IAT II Certification

Tools

SCAP

Evaluate-STIG

Tenable

Splunk

Fortify

SonarQube

Job description

Lockheed Martin Space seeks a Classified Cybersecurity ISSO to support FBM, located in Cape Canaveral, FL. The role involves daily cybersecurity operations, RMF-based administration, and implementing security requirements for classified and unclassified systems.

The position requires a current DoD Secret clearance with potential to obtain Top Secret, familiarity with STIGs, vulnerability scanning, and creating authorization packages. Strong documentation and regulatory reporting are essential.