Classified Cybersecurity Senior ISSO

Lockheed Martin•Stratford, CT

4d•Hybrid

About The Position

• Oversee day-to-day information system security operations including auditing the IS, hardware, and software implementations and RMF package authorizations. • Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF). • Upkeep, monitor, analyze, and respond to network and security events. • Document compliance actions with the ISSM to address non-compliance in the allotted time frame. • Ensure systems are operated, maintained, and disposed of in accordance with internal/external security policies and practices. • Participate in internal/external security audits/inspections; performs risk assessments. • Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle. • Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance. • Ensure configuration management (CM) for security relevant IS software, hardware, and firmware is maintained and documented. • Assist in conducting investigations of computer security violations and incidents, reporting as necessary. • Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered. • Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and Program Security.

Requirements

TS Clearance required
DoD 8570 IAT Level II certification or higher
Experience with IS auditing and investigations
Knowledgeable of operating system security requirements (Windows/RHEL)
Hands-on experience with industry-standard Information Assurance tools (Splunk, Nessus, SCAP, etc.)
Experience with developing, reviewing and maintaining RMF artifacts (SSP, IRP, CP, RAR, etc.)

Nice To Haves

MS 365 and Power Automate
Agile Development and Jira
Experience Network development/management
Deep experience obtaining and maintaining system ATOs
Hands-on experience with ICD 503/JSIG/DAAPAM
DoD 8570 IAM Level III certification
Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education, with 5 years of professional experience; or 3 years of professional experience with a related Masters degree

Responsibilities

Oversee day-to-day information system security operations including auditing the IS, hardware, and software implementations and RMF package authorizations.
Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
Upkeep, monitor, analyze, and respond to network and security events.
Document compliance actions with the ISSM to address non-compliance in the allotted time frame.
Ensure systems are operated, maintained, and disposed of in accordance with internal/external security policies and practices.
Participate in internal/external security audits/inspections; performs risk assessments.
Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle.
Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
Ensure configuration management (CM) for security relevant IS software, hardware, and firmware is maintained and documented.
Assist in conducting investigations of computer security violations and incidents, reporting as necessary.
Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and Program Security.