Classified Cyber Security - E2

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Long Description

Lockheed Martin Missiles and Fire Control's (LM MFC) Security team seeks security professionals to protect critical government capabilities that enable warfighter supremacy against peer and near‑peer adversaries. In this role you will safeguard sensitive information and warfighting systems essential to U.S. and allied interests, working alongside other security experts and military personnel to provide a secure operating environment. You will leverage your education, experience, and Lockheed Martin resources to keep these capabilities protected in a fast‑paced, real‑world setting.

Classified Cybersecurity helps secure state-of-the-art engineering and manufacturing systems by applying cutting edge cybersecurity principles, rising to the challenge of building a more secure world for the warfighter. This position will partner with the security team, program, and government customers to perform as an Information Systems Security Officer (ISSO) in Chelmsford MA.

What You Will Be Doing
As an ISSO, you will be responsible for overseeing day-to-day information system security operations, ensuring compliance with internal and customer security requirements, and maintaining the security and integrity of our systems. Your responsibilities will include, but are not limited to:

• Oversee day-to-day information system security operations including auditing the IS, hardware, and software implementations and RMF package authorizations
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
• Upkeep, monitor, analyze, and respond to network and security events
• Document compliance actions with the Information System Security Manager (ISSM) to address non-compliance in the allotted time frame
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices
• Participate in internal/external security audits/inspections; performs risk assessments.
• Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle
• Evaluate proposed changes or additions to the information system and advise the ISSM of their security relevance
• Ensure configuration management (CM) for security relevant IS software, hardware, and firmware is maintained and documented
• Assist in conducting investigations of computer security violations and incidents, reporting as necessary
• Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered
• Communicate, implement and manage a formal Information Security / Information Systems Security Program together with the ISSM and Program Security

Basic Qualifications

• Ability to obtain and maintain a Secret clearance
• Bachelor's degree in Cybersecurity (or related discipline) from an accredited college OR similar related professional experience
• DoD 8570/8140 IAT Level II baseline certification (CCNA-Security, CySA+ **, GICSP, GSEC, Security+ CE, CND, SSCP)
• Knowledge of system accreditation requirements and NIST 800-53 (DAAG/JSIG) RMF implementation
• Experience with classified information system auditing and investigations

Desired Skills

• Previous experience supporting classified information systems
• Technical experience in Windows, Linux operating systems and command line use
• Demonstrated technical experience with industry standard Information Assurance tools (Splunk, Nessus/Tenable/ACAS, STIGViewer/SCAP Compliance Checker/eSTIG, McAfee ePO, McAfee DLP)
• Experience implementing/validating STIG application, system hardening, analysis, and vulnerability management
• Experience with developing, reviewing, and maintaining RMF artifacts
• Knowledge of other security disciplines and how they impact and interact with information system security
• Understanding of network concepts and Type 1 encryption devices, such as TACLANE and boundary protection devices/firewalls
• Ability to perform technical assessments for systems being presented to the government for authorization
• Ability to support multiple projects in dynamic, demanding environments