Information System Security Officer (ISSO) - Classified Cyber Security Sr

Lockheed Martin Corporation; Littleton (CO); On-site; USD 96,000 - 178,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Flexible work arrangements

401(k) match

Paid time off

Job summary

Lockheed Martin is seeking a Senior Classified Cybersecurity team member and Information System Security Officer (ISSO) for the DarkStar enterprise network. You will partner with cyber, industrial security, CIT and PM teams across the enterprise and with U.S.

government agencies to ensure compliance and effective risk management. Requirements include Final Secret clearance or eligibility for Top Secret, RMF experience, Windows and RHEL security, IA tools and SIEM, plus DoD 8140/8570

Qualifications

• Clearance required: Final Secret / T3, with ability to obtain Final Top Secret / T5.
• RMF processes and requirements knowledge.
• Experience with Windows and RHEL security.
• Familiar with standard IA tools and SIEMs.

Responsibilities

• Oversee day-to-day information system security operations for DarkStar eWAN.
• Conduct weekly security audits and continuous monitoring.
• Process SIAs and SAARs, MSARs, SCARs, and VMCRs.
• Create and maintain eMASS RMF package and related artifacts.
• Serve as technical POC to support enterprise architecture in classified IT.
• Support A&A process, government visits, and CMEs.

Skills

RMF

Windows security

RHEL security

SIEM tools

Info Assurance

Security+ / CISSP

Technical POC

Cybersecurity

DoD 8140 / 8570

Education

Bachelor's in Information Systems Security

Master’s degree in a relevant field

Tools

STIGs/SRGs

ACAS

SCC Tool

Tenable Nessus

Security Center

Job description

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the‑art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

As a Senior Classified Cybersecurity team member and Information System Security Officer (ISSO) for the Lockheed Martin collateral classified DarkStar Enterprise Wide Area Network (eWAN), you will partner with cyber and industrial security, classified IT (CIT) and Program Management (PM) teams across the enterprise as well as U.S. Government authorizing agencies and customers.

In this role, you will need technical and management skills to:

• Assist the Information System Security Manager (ISSM) and alternate (A-ISSM) in overseeing day-to-day information system security operations for the DarkStar eWAN as detailed below:
• Conduct weekly security audits and continuous monitoring (ConMon) activities.
• Processing of hardware and software Security Impact Analyses (SIAs) and user System Access Authorization Requests (SAARs).
• Processing Move Ship Authorization Requests (MSARs), Security Change Authorization Requests (SCARs), and Virtual Machine Change Requests (VMCRs).
• Conducting hardware sanitization and destruction.
• Conducting system security validations.
• Creation and maintenance of eMASS RMF package, change request and plan submissions (SSP, Mobility, ConOps, Disestablishment, Decommission etc.) and related artifacts, policies and procedures (AI SOP, Baselines document, diagrams etc.)
• Serve as a technical POC to help support enterprise architecture and complex classified IT environments.
• Perform duties related to data transfer to/from the DarkStar eWAN systems.
• Conduct security investigations and system forensics.
• Take initiative to identify and execute opportunities for the growth of the organization.
• Ensure compliance with contract security specifications (DD254), customer governing requirements, Lockheed Martin and business area security policies.
• Prepare for and support Assessment and Authorization (A&A) process, U.S Government customer visits, audits and continuous monitoring evaluations (CMEs).
• Ensure consistent implementation of compliant and cost- effective security solutions.
• Evaluate and articulate recommendations for improvements to leadership.
• Establish and maintain effective internal/external partnerships and apply business‑minded and risk‑managed solutions to dynamic security environments.

Basic Qualifications

• A Final Secret clearance / T3 eligibility required to start, and ability to obtain Final Top Secret clearance / T5 eligibility.
• Risk Management Framework (RMF) processes and requirements
• Knowledgeable of Windows (workstations & server) and Red Hat Enterprise Linux (RHEL) and other Linux distribution operating systems, network, and application security requirements.
• Experience with system hardening and industry standard Information Assurance tools such as the STIGs/SRGs, STIG Viewer, ACAS, SCC Tool, Vulnerator, Tenable Nessus and/or Security Center etc., and SIEM tools.
• Background in Cyber Security, Information Assurance, Cyber Engineering etc.
• Have and maintain a DoDM 8140.03 Qualification / DoDD 8570 IAT Level II or IAM Level I certification (e.g. Security+ CE, CISSP etc.)

Desired Skills

• A Final Top Secret clearance / T5 eligibility.
• Experience with large geographically dispersed networks (UWAN, eWAN)
• Experience with modern solutions and large complex networks
• Experience with the Defense Counterintelligence & Security Agency (DCSA) and their implementation of the Risk Management Framework (RMF)
• Bachelor Degree in Information Systems Security, Management Information Systems, Information Technology, or other relevant discipline and 9 years of relevant work experience or a Master’s Degree and 5 years of experience.

Pay Information

Full-Time Salary Range: $95900.00 - $178100.00

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well‑being, and help you grow—both professionally and personally. The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered:

Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full‑time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.