Cyber Systems Security Engineer-Level 4

Lockheed Martin•Fort Worth, TX

1d•Onsite

About The Position

This is an Individual Contributor position for the Integrated Fighter Group (IFG) Cyber Resilience Engineering (CRE) Team Engineer. The Integrated Fighter Group is comprised of F-22, F-16, T-50 platforms. This position resides in the Combat Systems organization. This position reports to the IFG CRE Manager. The Cybersecurity Engineer will support/coordinate the execution of a range of cyber risk analysis and security assessment methods; be able to comprehend and support customer composition of Security Classification Guide (SCG) guidance, implement patches and Security Technical Implementation Guides (STIGs) to address cyber vulnerabilities, feature changes, or obsolescence; develop documentation for specific installations and configurations necessary to obtain Authorizations to Operation (ATOs) in support of program schedules; and contribute to and implement Plan of Action and Milestones (POAMs) to mitigate open cyber risks. The ideal candidate will communicate effectively with a range of audiences, technical and non-technical, and will function effectively on the IFG CRE engineering team to create a collaborative and inclusive environment that allows for the establishment of contract goals, itemized planning of tasks, and prioritization of tasks that drives the efficient execution of objectives.

Requirements

B.S. degree in Cybersecurity, Cyber Security Engineering, Computer Science, Computer Security, Computer Engineering, Software Engineering, or Systems Engineering
Experience with Security Technical Implementation Guide (STIG) and security requirement implementation
Experience with Implementing the NIST Risk Management Framework (RMF) and NIST SP 800-53 controls. Specifically related to Joint Special Access Program Implementation Guide (JSIG)
Experience reviewing and evaluating Basis of Estimates for technical accuracy and completeness across the Cyber Engineering, Design, Crypto and TEMPTEST teams
Demonstrated problem-solving and troubleshooting skills
Experience with full software development life cycle, and system engineering process
Final Secret Clearance to start with the ability to obtain program’s clearance
Must be a US Citizen

Nice To Haves

Experience working in an aerospace design environment (e.g. F-22 Program) with exposure to DoD customers and their accrediting authorities.
Extensive experience developing and maintaining core RMF/JSIG security documentation artifacts for A&A Packages including Security Control Traceability Matrix (SCTM), System Security Plan (SSP) and/or Information Assurance Standard Operating Procedures (IA SOP), Plan of Action & Milestones (POA&M), and Risk Assessment Report (RAR)
Experience with creating and presenting technical information to customers
Strong analytical and organizational skills with excellent communication skills (written and verbal communications) and have the ability to work in a dynamic work environment
Experience in adopting agile and DevSecOps principles to increase speed and improve value delivery
Experience developing and executing schedules; defining and linking internal and external dependencies; connecting applicable predecessors and successors; developing project plans and roadmaps
Experience analyzing, decomposing, and allocating security controls into executable security requirements at the system, sub-system and component level
Experience developing security architecture representations (e.g. Accreditation Boundaries, Physical Diagrams, Logical Diagrams, Functional Diagrams), system design modeling (UML, SysML, Rhapsody, Cameo), as well as requirements management
Knowledge of earned value (EVMS)
DoD Directive 8570.1 IAT Level II or higher certification (Security+ certification or higher)
Ability to travel as required

Responsibilities

Work with a cross functional team to plan, design, develop, test, and validate cyber solutions throughout their life cycle.
Perform cyber risk activities such as threat modeling, vulnerability analysis, and evaluating mitigation options.
Identify and address supply chain security concerns.
Analyze design constraints and trade offs, and contribute to detailed system and security designs for cyber related parts of a program.
Collaborate with cyber and system architects and developers to oversee solution development.
Test hardware and/or software for cybersecurity compliance, ensuring they meet specified requirements.
Apply standard cybersecurity processes, methods, tools, and best practices consistently across projects.
Carry out Assessment and Authorization (A&A) tasks as required by the customer.