Information Systems Security Officer - E1

Lockheed Martin Corporation; Sunnyvale (CA); On-site; USD 73,000 - 135,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Flexible work arrangements

401(k) match

Paid time off

Holidays

Parental Leave

Employee Assistance Program

Flexible Spending Accounts

Education Assistance

Life Insurance

Short-Term Disability

Long-Term Disability

Job summary

Lockheed Martin Corporation in Sunnyvale, CA seeks a Cybersecurity Associate to partner with security teams and government customers to serve as an ISSO, performing RMF-based security operations and risk assessments.

You will oversee daily IS security tasks, implement security controls, conduct audits, respond to incidents, and maintain documentation and CM. U.S. citizenship and Secret clearance are required.

Qualifications

• Ability to obtain a Secret Clearance; must be a U.S. Citizen.
• DoD 8570 IAT Level II (SEC+) certification or ability to obtain within 6 months of hire.
• Bachelor's degree from an accredited college in a related discipline, or equivalent experience/combined education.

Responsibilities

• Oversee day-to-day information system security operations including hardware and software implementations.
• Carry out RMF-based technical administration of IS and risk management.
• Auditing of the IS.
• Upkeep, monitor, analyze, and respond to security events.
• Document compliance actions and develop POA&M with the ISSM to address non-compliance in time.
• Ensure systems are operated, maintained, and disposed of per security policies.
• Maintain CM for security-relevant IS software/hardware/firmware per baseline.
• Keep information system security documentation current and accessible.
• Maintain records for devices across the IS lifecycle.
• Evaluate proposed changes and advise the ISSM of security relevance.
• Assist and conduct security IS education.
• Participate in internal/external security audits/inspections; perform risk assessments.
• Inform ISSM on technical IS security matters.
• Assist investigations of computer security violations and incidents; report to CPSO and PMs.
• Ensure proper protections when incidents or vulnerabilities are discovered.
• Communicate and manage the Information Security Program with ISSM and CPSO.
• Implement and enforce IS Policies and Procedures with ISSM and CPSO.
• Review RMF Package authorizations with ISSM and CPSO.

Skills

Network security

RMF (Risk Management Framework)

DISA STIGs

Security hardening

Windows security

Unix/Linux security

Incident response

POA&M/compliance

Education

Bachelor's degree in a related discipline

Job description

Standard Job Description

This position requires the ability to obtain a Secret clearance. Must be a U.S. Citizen. The Cybersecurity Associate will partner with the security team, program, and government customers to perform as an Information Systems Security Officer (ISSO) in Sunnyvale, CA.

In This Role You Will

• Oversee day-to-day information system security operations including hardware and software implementations.
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
• Auditing of the IS.
• Upkeep, monitor, analyze, and respond to network and security events.
• Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M) with the Information Systems Security Manager (ISSM) to address non-compliance in the allotted time frame.
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
• Ensure configuration management (CM) for security-relevant IS software, hardware, and firmware is maintained and documented in accordance with baseline.
• Ensure all information system security-related documentation is current and accessible to properly authorized individuals.
• Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle.
• Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
• Assist and conduct security IS education.
• Participate in internal/external security audits/inspections; performs risk assessments.
• Inform ISSM on technical IS security matters.
• Assist in conduct of investigations of computer security violations and incidents, reporting as necessary to both the Contractor Program Security Officer (CPSO) and Program Managers.
• Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
• Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and CPSO.
• Implement and enforce Information Security Policies and Procedures together with ISSM and CPSO.
• Review and oversee RMF Package authorizations together with ISSM and CPSO.

Basic Qualifications

• Ability to obtain a Secret Clearance; must be a U.S. Citizen
• DoD 8570 IAT Level II (SEC+) certification or ability to obtain within 6 months of hire
• Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education.

Desired Skills

• Knowledge of network security (e.g., encryption, firewalls, authentication, perimeter protection).
• Knowledge of network design processes, to include understanding of security objectives, operational objectives, and trade-offs.
• Knowledge of Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), classified computer operations and experience with the technical configuration requirements for various operating Systems
• Knowledge of executing Security Hardening on diverse LINUX and Windows Operating Systems based on approved DISA STIGs and SRGs.
• Knowledge of with Risk Management Framework (RMF) as Subject Matter Expert (SME) implementation across multiple phases of a large program.
• Knowledge of configuring Windows, Networking, and NIX-based operating systems IAW DISA STIGs
• Knowledgeable in Solaris/UNIX/Linux command line
• Prior Information System Security Engineer (ISSE) or System Administration experience.

Pay Information

Full-Time Salary Range: $72800.00 - $135200.00

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered:

Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.