Information System Security Officer (ISSO)

Lockheed Martin Corporation•Colorado Springs, CO

35d•Onsite

About The Position

Lockheed Martin's, Rotary & Mission Systems (LM RMS), Classified Cyber Security invites you to step up to one of today's most daunting challenges: the protection of exquisite government capabilities leading to warfighter supremacy against our peer and near peer adversaries. As a cyber security professional at Lockheed Martin, you'll safeguard the sensitive information and warfighting capabilities that our citizens and the world depend upon to protect U.S. and ally interests. Here, you'll work alongside other cyber security experts and military members to support their military operational objectives by providing them with a safe and secure operating environment. In this fast-paced, real-world environment, you'll draw on all your education and experience as well as the resources of Lockheed Martin to keep these exquisite capabilities protected. We are looking for an individual to serve as a Classified Cyber Security Senior / Information System Security Officer (ISSO) and join our team's efforts in supporting and defending classified networks. Successful candidates should be knowledgeable of information technology security principles, various computer/network operating systems, and Microsoft suite of applications. This is a multi-tasking environment that demands customer service, communication, leadership, and organizational skills. An ideal and successful candidate for this position has proven experience working both independently and as part of a team, is an accomplished cyber security practitioner, is experienced in both the Collateral and Special Access Program (SAP) environments. The Work: This Information System Security Officer (ISSO) position is responsible for cybersecurity efforts at the Colorado Springs, CO facility supporting development, maintenance, and oversight of the assigned classified and/or unclassified systems. Typical responsibilities of the ISSO may include but are not limited to: Maintaining the site's cybersecurity program for assigned systems. Ensuring all applicable cybersecurity policy, plans and procedures are followed. Ensuring required cybersecurity controls are implemented and validated, to include continuous monitoring actions for assigned systems. Developing and maintaining cybersecurity related plans, procedures and guidance. Monitoring and recognizing non-compliance, suspicious and anomalous activity (i.e., threats), and effectively reporting such activity and associated risks to the appropriate parties. Ensuring plans of actions and milestones or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implementing, or overseeing, required corrective actions. Conducting role-based cybersecurity training for assigned users. Creating, collecting and retaining data to meet reporting requirements. Monitoring and correlating data (e.g., logs, events, activity, etc.) from a variety of sources (e.g., Splunk, ePO, ESS, ACAS, etc.) to identify and mitigate threats, vulnerabilities and non-compliance. Investigating, analyzing and responding to cyber events, incidents and non-compliance, to include trend analysis, assembling detailed written reports and briefing the appropriate parties. Identifying, implementing, and enforcing overall security requirements for the proper handling and storage of Government data and electronic media. Conducting self-inspections and preparing for customer inspections. Communicating and interacting professionally during the enforcement of security policy and procedures.

Requirements

MUST BE A U.S. CITIZEN
Final Transferable Top Secret security clearance; last Periodic Reinvestigation must be within the last five (5) years or enrollment in Continuous Vetting program
Possess a valid certification that meets or exceeds DoD 8570 IAT Level II certification
Experience executing Security Hardening on Windows and/or Linux Operating Systems based on approved DISA STIGs and SRGs
Experience with standard cyber security tools and applications (e.g., Splunk, ESS/Trellix ePO, ACAS/Tenable.sc)
Ability to build effective customer and partner relationships

Nice To Haves

Prior experience as an ISSO or related DoD Cyber Workforce Role
Previous experience working in an SAP / SCI / Collateral environment
Proven knowledge of DCSA Assessment and Authorization Process Manual (DAAPM), Joint Special Access Program Implementation Guide (JSIG), or Risk Management Framework (RMF) as a Subject Matter Expert (SME)
Excellent written and verbal communication skills and ability to effectively interface with numerous cognizant security agencies, customers and senior leadership
Knowledge of other security disciplines and how they impact and interact with information system security

Responsibilities

Maintaining the site's cybersecurity program for assigned systems.
Ensuring all applicable cybersecurity policy, plans and procedures are followed.
Ensuring required cybersecurity controls are implemented and validated, to include continuous monitoring actions for assigned systems.
Developing and maintaining cybersecurity related plans, procedures and guidance.
Monitoring and recognizing non-compliance, suspicious and anomalous activity (i.e., threats), and effectively reporting such activity and associated risks to the appropriate parties.
Ensuring plans of actions and milestones or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implementing, or overseeing, required corrective actions.
Conducting role-based cybersecurity training for assigned users.
Creating, collecting and retaining data to meet reporting requirements.
Monitoring and correlating data (e.g., logs, events, activity, etc.) from a variety of sources (e.g., Splunk, ePO, ESS, ACAS, etc.) to identify and mitigate threats, vulnerabilities and non-compliance.
Investigating, analyzing and responding to cyber events, incidents and non-compliance, to include trend analysis, assembling detailed written reports and briefing the appropriate parties.
Identifying, implementing, and enforcing overall security requirements for the proper handling and storage of Government data and electronic media.
Conducting self-inspections and preparing for customer inspections.
Communicating and interacting professionally during the enforcement of security policy and procedures.