F-35 Information System Security Officer - Luke AFB, AZ (Mid-Career)

Lockheed Martin; Luke (MD); On-site; USD 85,000 - 158,000; Full time

Benefits offered by this job

Medical benefits

Flexible work arrangements

401(k) match

Paid time off

Parental leave

Job summary

Lockheed Martin is seeking an Information System Security Officer (ISSO) to support the Information System Security Manager (ISSM) in developing, maintaining and overseeing the cybersecurity of F-35 systems at Luke AFB, AZ. The role is on-site and focuses on implementing cybersecurity controls and monitoring for assigned systems.

Responsibilities include security plan development, non-compliance detection, data collection for reporting, and coordinating remediation actions with various teams.

Qualifications

• Final Transferable Secret security clearance required.
• Ability to obtain SAP access.
• Certification meeting or exceeding DoD 8570.01-M IAT II requirements (e.g., CCNA-Security, CySA+, GICSP, GSEC, Security+ CE).
• Experience with NICE/DoD workforce frameworks and cyber roles.

Responsibilities

• Support ISSM in developing and maintaining cybersecurity for F-35 systems.
• Monitor for compliance, threats, and reporting of risks.
• Maintain POA&Ms and remediation plans for vulnerabilities.
• Coordinate data collection for reporting and incident response.

Skills

Security clearance

IAT II

DoD 8570

Cybersecurity experience

NICE/DoD frameworks

System security

SAP/JSIG knowledge

Tools

Splunk

ePO

ACAS

ELA

Job description

The Work

This Information System Security Officer (ISSO) position will support the Information System Security Manager (ISSM) in developing, maintaining and overseeing the cybersecurity of assigned classified and/or unclassified F-35 systems at

• Ensuring required cybersecurity controls are implemented and validated, to include continuous monitoring actions for assigned systems.
• Supporting the development and maintenance of cybersecurity related plans and procedures.
• Monitoring for non-compliance, anomalous activity (i.e., threats), and effectively reporting such activity and associated risks.
• Ensuring POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implementing, or overseeing, corrective actions.
• Creating, collecting and retaining data to meet reporting requirements.
• Monitoring and correlating data (i.e., events) from a variety of sources (e.g., Splunk, ELA, ePO, ACAS, etc.) to identify and mitigate threats, vulnerabilities and non-compliance.
• Investigating, analyzing and responding to cyber events, incidents and non-compliance, including trend analysis, creating detailed written reports and briefing the appropriate parties.
• Identifying, implementing and enforcing requirements for the proper handling and storage of Government data and electronic media.
• Conducting self-inspections and preparing for customer inspections.
• Interacting professionally during the enforcement of security policy and procedures.

Short Description

The Work

This Information System Security Officer (ISSO) position will support the Information System Security Manager (ISSM) in developing, maintaining and overseeing the cybersecurity of assigned classified and/or unclassified F-35 systems at Luke AFB, AZ. The position is 100% on-site, at a customer facility. Typical ISSO responsibilities include but are not limited to:

• Ensuring required cybersecurity controls are implemented and validated, to include continuous monitoring actions for assigned systems.
• Supporting the development and maintenance of cybersecurity related plans and procedures.
• Monitoring for non-compliance, anomalous activity (i.e., threats), and effectively reporting such activity and associated risks.
• Ensuring POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implementing, or overseeing, corrective actions.
• Creating, collecting and retaining data to meet reporting requirements.
• Monitoring and correlating data (i.e., events) from a variety of sources (e.g., Splunk, ELA, ePO, ACAS, etc.) to identify and mitigate threats, vulnerabilities and non-compliance.
• Investigating, analyzing and responding to cyber events, incidents and non-compliance, including trend analysis, creating detailed written reports and briefing the appropriate parties.
• Identifying, implementing and enforcing requirements for the proper handling and storage of Government data and electronic media.
• Conducting self-inspections and preparing for customer inspections.
• Interacting professionally during the enforcement of security policy and procedures.

Assigned systems may vary in classification, capabilities and complexity. Mission requirements may require other than first-shift work and additional responsibilities as assigned.

Who We Are

Lockheed Martin is a Cyber Security pioneer, partner, innovator and builder. In support of our many customers, the amazing members of our team are responsible for providing all aspects of cybersecurity support in a complex environment. In a rapidly growing enterprise, this role offers the opportunity to grow and hone the unique skills and experiences required as a cybersecurity expert to create, design and build solutions to some of the world’s hardest engineering problems.

Why Join Us

Your Health, Your Wealth, Your Life

With our employees as our top priority, we provide diverse career opportunities designed to propel development and boost agility. Our flexible schedules, competitive pay and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. At Lockheed Martin, we place an emphasis on empowering our employees by fostering innovation. We believe that by applying the highest standards of business ethics and visionary thinking, everything is within our reach – and yours as a Lockheed Martin employee. Lockheed Martin values your skills, training and education. Come and experience your future!

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Basic Qualifications

• Final Transferable Secret security clearance; last Periodic Reinvestigation must be within the last five (5) years or enrollment in Continuous Vetting program.
• Ability to obtain and maintain Special Access Program (SAP) access.
• Possess a valid certification that meets or exceeds DoD 8570.01-M IAT II requirements.
• Meets: CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP
• Exceeds: SecurityX, CCNP Security, CISA, CISSP (or Assc), GCED, GCIH, CCSP
• Prior experience in a cyber workforce role, as categorized by the NICE or DoD workforce frameworks.

Desired Skills

• Prior experience as an ISSO, ISSM or related DoD Cyber Workforce Role on one or more F-35 information systems.
• Prior experience ensuring compliance with applicable laws, regulations, guidance and policies as they relate to DoD cybersecurity and SAPs (e.g., DoDI 8510.01, JSIG, DoDM 5205.07, NIST SP 800 series).
• Prior experience with the system authorization process, associated artifacts and their requirements (e.g., SSP, SCTM, Security CONOPs, SOPs).

Pay Information

Full-Time Salary Range: $85300.00 - $158300.00

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered

Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.