Cyber Systems Security Engineering Stf - E4

Lockheed Martin; Patuxent Highland (MD); Presencial; USD 136.000 - 252.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical

Dental

Vision

Flexible work arrangements (4x10)

401(k) match

Paid time off

Parental Leave

Education Assistance

Descripción de la vacante

Lockheed Martin is seeking a cybersecurity professional to apply an interdisciplinary approach across the lifecycle of cyber solutions. You will conduct threat modeling, vulnerability analyses, and mitigation reviews while coordinating with architects and developers to ensure secure designs.

The role emphasizes risk-based assessments, RMF/JSIG/DoD compliance, and hands-on cybersecurity testing of hardware and software. Travel up to 20% may be required.

Formación

• DoD 8140 IAT Level II or higher certificate such as CompTIA Security+ CE, CySA+, CASP+, GSEC, CISSP.
• Extensive experience implementing and validating IA/Cybersecurity policies.
• Extensive experience implementing and validating security controls at the system/subsystem and component level.
• Deep experience with both internal and customer witnessed cyber security assessments on complex information systems.
• B.S. degree in a technical discipline such as Cyber Security, Computer Science, Computer Engineering, or Information Technology or equivalent applied experience.
• Ability to travel as required (up to 10–20%).

Responsabilidades

• Apply interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle.
• Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and mitigation analysis.
• Coordinate with architects and developers to oversee solution development.
• Perform cybersecurity test and evaluation of hardware/software to verify compliance with specs.
• Implement Assessment and Authorization activities as required by customers.

Conocimientos

Threat modeling

IA/Cybersecurity policies

Security controls (system/subsystem)

Cyber security assessments

Travel up to 20%

Embedded real-time OS security

Linux hardening

Windows hardening

Cross Domain Solution (CDS)

JSIG-based BoE packages

RMF/JSIG monitoring

Patching and STIGs validation

RMF/A&A process

DevSecOps principles

MBCRA methodologies

Cyber scripting (Python/JavaScript/BSD

Educación

DoD 8140 IAT Level II or higher cert (e.g., CISSP)

B.S. in Cyber Security / Computer Science / Engineering / IT

Descripción del empleo

Standard Job Description

Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns. Develop, evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain. Coordinate with Cyber and system architects and developers to provide oversight in the development of solutions. Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Employs cyber security processes, methods, techniques and tools and assure their consistent application. Implements appropriate Assessment and Authorization activities as required by customers. *USE OF THIS CLASSIFICATION REQUIRES AUTHORIZATION FROM THE BUSINESS AREA CYBER DIRECTOR OR DELEGATE*

Standard Job Description

Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns. Develop, evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain. Coordinate with Cyber and system architects and developers to provide oversight in the development of solutions. Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Employs cyber security processes, methods, techniques and tools and assure their consistent application. Implements appropriate Assessment and Authorization activities as required by customers. *USE OF THIS CLASSIFICATION REQUIRES AUTHORIZATION FROM THE BUSINESS AREA CYBER DIRECTOR OR DELEGATE*

Basic Qualifications

• DoD 8140 IAT Level Il or higher certificate such as CompTIA Security+ CE, CySA+, CASP+, GSEC, CISSP.
• Extensive experience implementing and validating compliance with IA/Cybersecurity policies.
• Extensive experience implementing and validating security controls at the system/subsystem and component level.
• Deep experience with both internal and customer witnessed cyber security assessments on complex information systems
• B.S. degree in a technical discipline such as Cyber Security, Computer Science, Computer
• Engineering, Computer Security, or Information Technology or equivalent applied experience
• Ability to travel as required (up to 10% - 20%)

Desired Skills

• Experience with operating systems for embedded real-time environments typically used in avionics and aircraft systems (not Mobile or IoT)
• Deep experience with securely configuring and hardening Linux and Windows based operating systems.
• Experience with gaining Cross Domain Solution (CDS) accreditation and deploying approved CDSs as embedded systems.
• Extensive experience creating and updating JSIG based Body of Evidence (BoE) packages including SSPs, SCTMs, POA&Ms, etc to achieve and maintain system authorizations (ATOs, IATTs, etc).
• Deep experience conducting JSIG/RMF based continuous monitoring (CONMON), system analysis and auditing, and vulnerability assessments using cyber security tools such as Splunk, Solarwinds, Tenable Nessus/ACAS, Trellix ePO, etc.
• Highly skilled at verifying and validating patches and Security Technical Implementation Guides (STIGs) to address cyber vulnerabilities, feature changes, or obsolescence.
• Deep experience with implementation and deployment of DoD requirements, policies and processes as part of the Risk Management Framework (RMF) Assessment and Authorization (A&A) process.
• Demonstrated experience with one or more of the following standards/guides: RMF, JSIG, CNSSI-1253, Common Criteria, NSTISSIP 11, DoD8500.1, DoD8500.2, JAFAN 6/3, DITSCAP, DIACAP.
• Familiarity with secure software design, analysis, architecture and containerization including the application of Development, Security, and Operations (DevSecOps) principles to software development pipelines.
• Familiarity with one or more Mission-Based Cyber Risk Assessment (MBCRA) methodologies such as MRAP-C or similar.
• Experience creating, updating and implementing cyber security scripts with Python, JavaScript, Bash/Shell, Powershell or similar scripting language.
• Strong analytical and organizational skills with excellent communication skills (written and verbal communications) and the ability to work in a dynamic work environment.
• Experience with supporting and mitigating cyber based Supply Chain Risk Management (SCRM) concerns.

Pay Information

Full-Time Salary Range: $135700.00 - $251900.00

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well‑being, and help you grow both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered:

• Medical
• Dental
• Vision
• Flexible work arrangements and schedules (e.g., 4x10)
• 401(k) match
• Paid time off
• Holidays
• Parental Leave
• EAP
• Flexible Spending Accounts
• Education Assistance
• Life Insurance
• Short-Term Disability
• Long-Term Disability

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.