Cyber Sys Secur Engr Sr

Lockheed Martin•Marietta, GA

2d•Onsite

About The Position

Lockheed Martin Aeronautics Air Mobility and Maritime Missions in Marietta, GA is seeking a full-time Cyber Systems Security Engineer. The System Security Engineer translates security policies and architectural intent into concrete, verifiable system, subsystem, and component requirements. Leveraging a solid systems engineering foundation, the SSE supports derivation, allocation, and implementation of security functional and assurance requirements across the system, subsystem, and component levels. This role participates in threat modeling and vulnerability analysis activities, designs mitigation strategies, and authors verification and validation test procedures associated with RMF Artifacts. By conducting security test and evaluation, this position will confirm that the system meets its security objectives and complies with applicable RMF policies and standards. The engineer also creates and maintains security views within system models and collaborates closely with system architects, test teams, and other engineering disciplines to ensure seamless integration of security controls throughout the product lifecycle. In addition, this position mentor’s junior colleagues and shares expertise across the organization, helping to raise the overall cyber security competence of the team. In this role, you will ensure that cyber security requirements are properly defined, decomposed, allocated, implemented, and assessed to produce a cyber-resilient security design solution for the target platform. This includes participating in working groups, design reviews, and formal artifact reviews alongside other Subject Matter Experts (SMEs) and providing security expertise to ensure cyber security is considered early in the product development lifecycle. The successful candidate will have experience and/or knowledge of cyber risk analysis and security assessment methods, Plans of Actions and Milestones (POAMs) implementation to mitigate cyber risks, and effective communication with a range of audiences.

Requirements

B.S. degree in a technical discipline such as Cybersecurity, Computer Science, Computer Security, Computer Engineering, Software Engineering, Information Technology, Electrical Engineering
DoD Directive 8140.03 Level II or higher certification (Security X/+ certification or higher) or able to attain within 6 months of hire.
Demonstrated problem-solving and troubleshooting skills
Strong analytical and organizational skills
Ability to work in a dynamic work environment
Experiences performing Cybersecurity on embedded systems.
Experience applying RMF and developing RMF Artifacts.
Experience utilizing ATLASSIAN Suite. (JIRA/CONFLUENCE)
Ability to travel as required
Must be a US Citizen; this position will require a government security clearance.
This position is located at a facility that requires special access.

Nice To Haves

Experience with securely configuring and hardening Linux/Windows based operating systems.
Experience with development and employment of DoD requirements, policies and processes as part of the Risk Management Framework (RMF) Assessment and Authorization (A&A) process.
Demonstrated experience with two or more of the following standards/guides: RMF, JSIG, CNSSI-1253, DoD8500.1.
Familiarity with Secure Software Design and Architecture.
Strong analytical and organizational skills with excellent communication skills (written and verbal communications)
Demonstrated strategic thinker and implementer.

Responsibilities

Translate security policies and architectural intent into concrete, verifiable system, subsystem, and component requirements.
Support derivation, allocation, and implementation of security functional and assurance requirements across the system, subsystem, and component levels.
Participate in threat modeling and vulnerability analysis activities.
Design mitigation strategies.
Author verification and validation test procedures associated with RMF Artifacts.
Conduct security test and evaluation to confirm system security objectives and compliance with RMF policies and standards.
Create and maintain security views within system models.
Collaborate with system architects, test teams, and other engineering disciplines to ensure seamless integration of security controls.
Mentor junior colleagues and share expertise across the organization.
Ensure cyber security requirements are properly defined, decomposed, allocated, implemented, and assessed.
Produce a cyber-resilient security design solution for the target platform.
Participate in working groups, design reviews, and formal artifact reviews.
Provide security expertise to ensure cyber security is considered early in the product development lifecycle.