F-35 Lead Info System Security Officer - Montgomery, AL (Mid-Career)

Lockheed Martin•Montgomery, AL

12d•Onsite

About The Position

Lockheed Martin’s, Rotary & Mission Systems (LM RMS), F-35 Cyber Security invites you to step up to one of today’s most daunting challenges: the protection of exquisite government capabilities leading to warfighter supremacy against our peer and near peer adversaries. As a cybersecurity professional at Lockheed Martin, you’ll safeguard the sensitive information and warfighting capabilities that our citizens and the world depend upon to protect U.S. and ally interests. Here, you’ll work alongside other cybersecurity experts, related departments, and military members to support the military operational objectives by providing them with a safe and secure operating environment. In this fast-paced, real-world environment, you’ll draw on all your education and experience as well as the resources of Lockheed Martin to keep these exquisite capabilities protected. This Lead Information System Security Officer (ISSO) position will support the Information System Security Manager (ISSM) in developing, maintaining and overseeing the cybersecurity of assigned classified and/or unclassified F-35 systems at Dannelly Field ANGB, AL . Responsibilities include but are not limited to: Primary representative for the on-site cybersecurity team; act on behalf of the ISSM in stakeholder meetings and communications. Drive the development and review of cybersecurity related policies, plans and procedures on behalf of the ISSM. Lead the implementation and assessment of security controls as defined by the system authorization body of evidence. Lead self-inspections and verify site is prepared for customer inspections. Incident response focal point: ensure timely and accurate communication, documentation, investigation, response and closure to cyber incidents. Monitor and recognize non-compliance, anomalous activity, and effectively report and track such activity and associated risks. Ensure POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implement, or oversee, corrective actions. Create, collect and retain data to meet reporting requirements. Monitor and correlate data from a variety of sources to identify and mitigate threats, vulnerabilities and non-compliance. Assigned systems may vary in classification, capabilities and complexity. Mission requirements may require other than first-shift work and additional responsibilities as assigned. Lockheed Martin is a Cyber Security pioneer, partner, innovator and builder. In support of our many customers, the amazing members of our team are responsible for providing all aspects of cybersecurity support in a complex environment. In a rapidly growing enterprise, this role offers the opportunity to grow and hone the unique skills and experiences required as a cybersecurity expert to create, design and build solutions to some of the world’s hardest engineering problems. With our employees as our top priority, we provide diverse career opportunities designed to propel development and boost agility. Our flexible schedules, competitive pay and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. At Lockheed Martin, we place an emphasis on empowering our employees by fostering innovation. We believe that by applying the highest standards of business ethics and visionary thinking, everything is within our reach – and yours as a Lockheed Martin employee. Lockheed Martin values your skills, training and education. Come and experience your future!

Requirements

Final Transferable Secret security clearance; last Periodic Reinvestigation must be within the last five (5) years or enrollment in Continuous Vetting program.
Ability to obtain and maintain Special Access Program (SAP) access.
Expertise in cybersecurity with a track record of leading technical teams to deliver complex projects using artifact-backed solutions based on independent analysis of information.
Excellent communication, facilitation, and stakeholder management skills.
Ability to translate technical concepts into operationally relevant language.
Possess a valid certification that meets or exceeds DoD 8570.01-M IAM II requirements.
Meets: CASP+ CE, CGRC, CISM, CISSP (or Assc), GSLC, CCISO, HCISPP
Prior experience in a cyber workforce role, as categorized by the NICE or DoD workforce frameworks.
Prior experience as an ISSO, ISSM or related DoD Cyber Workforce Role on one or more F-35 information systems.
Prior experience ensuring compliance with applicable laws, regulations, guidance and policies as they relate to DoD cybersecurity and SAPs (e.g., DoDI 8510.01, JSIG, DoDM 5205.07, NIST SP 800 series).
Familiarity with F-35 product lifecycle management and sustainment operations, to include the system authorization process and associated artifacts (e.g., SSP, SCTM, Security CONOPs, SOPs)
Experience using and configuring cyber SIEM and compliance tools (e.g., Splunk, Tenable).
Ability to work remotely
Position is fulltime onsite at a customer location.
This position requires a government security clearance, you must be a US Citizen for consideration.

Responsibilities

Primary representative for the on-site cybersecurity team; act on behalf of the ISSM in stakeholder meetings and communications.
Drive the development and review of cybersecurity related policies, plans and procedures on behalf of the ISSM.
Lead the implementation and assessment of security controls as defined by the system authorization body of evidence.
Lead self-inspections and verify site is prepared for customer inspections.
Incident response focal point: ensure timely and accurate communication, documentation, investigation, response and closure to cyber incidents.
Monitor and recognize non-compliance, anomalous activity, and effectively report and track such activity and associated risks.
Ensure POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implement, or oversee, corrective actions.
Create, collect and retain data to meet reporting requirements.
Monitor and correlate data from a variety of sources to identify and mitigate threats, vulnerabilities and non-compliance.
Assigned systems may vary in classification, capabilities and complexity.
Mission requirements may require other than first-shift work and additional responsibilities as assigned.