Cybersecurity A&A Engineer SSFB

Lockheed Martin•Schriever AFB, CO

6d•Onsite

About The Position

Our team, the Command and Control, Battle Management and Communications (C2BMC) team at Lockheed Martin, is dedicated to engineering, developing, and integrating new capabilities for the Missile Defense System that protects the United States and its allies. While we are part of a large organization, we operate within smaller, agile teams in a fast-paced, dynamic environment. Our responsibilities include Sensor/Weapon Integration, Algorithm Development, User Interface Development, Automated Testing, Cyber Security, and enhancing critical missile defense technologies. In this vital role, you will be utilizing your Assessment & Authorization (A&A) background to analyze ACAS/SCC/ConfigOS scans and controls for continuous system authorization. You will be working in collaboration with C2BMC and external stakeholders to assess system vulnerabilities, provide account management, and generate engineering responses for system POA&Ms. You will also be conducting risk analysis for Risk Acceptance Requests (RARs) and identifying process improvement opportunities and implementing solutions to enhance workflow efficiencies and system cybersecurity posture.

Requirements

Active DoD Top Secret Security Clearance prior to start
DoD 8570 certification IAT - Level II (e.g., Sec+ or Higher)
Solid cybersecurity engineering skills with working knowledge of cyber technologies, DoDI 8500.2, and NIST SP 800-53
Excellent technical document preparation and verbal communication
Thorough understanding of ACAS/SCC outputs
Hands-on experience reviewing scan data, STIGs, and Risk Management Framework (RMF) controls
Must be a U.S. Citizen for consideration.

Nice To Haves

Experience managing Cyber Tasking Orders (CTOs)/IAVMs and POA&Ms
Experience working with 3rd party assessors and auditors
Experience performing self-assessments and analyzing STIGs
Experience with eMASS/Xacta and the accreditation of Cross Domain Solutions (CDS)
Experience with the management & auditing of accounts
Knowledge of patch and configuration management of complex and disparate enterprise systems

Responsibilities

Utilizing your Assessment & Authorization (A&A) background to analyze ACAS/SCC/ConfigOS scans and controls for continuous system authorization.
Working in collaboration with C2BMC and external stakeholders to assess system vulnerabilities, provide account management, and generate engineering responses for system POA&Ms.
Conducting risk analysis for Risk Acceptance Requests (RARs).
Identifying process improvement opportunities and implementing solutions to enhance workflow efficiencies and system cybersecurity posture.