Information Systems Security Officer, Classified Cybersecurity Staff

Lockheed Martin•Huntsville, AL

6d•Onsite

About The Position

This position requires Final Secret clearance with ability to attain Top Secret clearance. The Classified Cybersecurity candidate will perform duties as an Information Systems Security Officer (ISSO) located at the Lockheed Martin Space Facilities in Huntsville and Courtland, AL. In this role you will: Oversee day-to-day information system security operations including assisting the ISSM on all technical security matters. Carry out technical administration of Information System (IS) in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF). Participate in auditing and continuous monitoring of the IS. Review and oversee RMF Package authorizations. Upkeep, monitor, analyze, and respond to security events. Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M). Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices. Ensure configuration management (CM) for security-relevant IS software, hardware, firmware, and system documentation. Ensure all information systems lifecycle management documentation are maintained. Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance. Assist and conduct security IS education and training. Participate in internal/external security audits/inspections; performs risk assessments. Assist in conducting investigations of computer security violations and incidents. Ensure proper protection and corrective measures are taken when an incident or vulnerability has been discovered. Implement and enforce Information Security Policies and Procedures together with ISSM and CPSO. Candidate will typically have a Bachelor's Degree and 5+ years of experience. Lockheed Martin is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics. The application window will close in 90 days; applicants are encouraged to apply within 5 - 30 days of the requisition posting date in order to receive optimal consideration. At Lockheed Martin, we use our passion for purposeful innovation to help keep people safe and solve the world's most complex challenges. Our people are some of the greatest minds in the industry and truly make Lockheed Martin a great place to work. With our employees as our priority, we provide diverse career opportunities designed to propel, develop, and boost agility. Our flexible schedules, competitive pay, and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. We place an emphasis on empowering our employees by fostering an inclusive environment built upon integrity and corporate responsibility. If this sounds like a culture you connect with, you’re invited to apply for this role. Or, if you are unsure whether your experience aligns with the requirements of this position, we encourage you to search on Lockheed Martin Jobs , and apply for roles that align with your qualifications. Other Important Information By applying to this job, you are expressing interest in this position and could be considered for other career opportunities where similar skills and requirements have been identified as a match. Should this match be identified you may be contacted for this and future openings.

Requirements

Final Secret clearance with ability to attain a Top Secret clearance.
DoD 8570 IAM Level II Certification (CISSP or equivalent).
Overall knowledge of Information Systems Security and ISSO duties.
Experience with IS auditing and investigations.
Strong understanding of infrastructure technologies and functionalities (e.g., Windows/Linux servers and workstations, Active Directory (AD).
Hands on experience with industry standard Information Assurance tools (e.g. Splunk, Nessus/Tenable/ACAS, STIG Viewer/SCAP Compliance Checker/eSTIG, Trellix ePO and DLP).
Experience with developing, reviewing, and maintaining RMF artifacts.
Experience with system accreditation requirements under the Risk Management Framework (RMF) and NIST 800-53 security controls.
Experience with developing, reviewing and maintaining RMF artifacts.
Bachelor's degree from an accredited college in a related discipline, or equivalent experience/combined education, with 5 years of professional experience.

Nice To Haves

Demonstrated technical experience in Windows, Linux operating systems and command line use.
Experience with tactical test environments.
Experience with Agile methodologies
Experience implementing or managing cyber security requirements on classified systems using NISPOM and DCSA accreditation processes
Ability to manage multiple projects in a dynamic, demanding environment.

Responsibilities

Oversee day-to-day information system security operations including assisting the ISSM on all technical security matters.
Carry out technical administration of Information System (IS) in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
Participate in auditing and continuous monitoring of the IS.
Review and oversee RMF Package authorizations.
Upkeep, monitor, analyze, and respond to security events.
Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M).
Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
Ensure configuration management (CM) for security-relevant IS software, hardware, firmware, and system documentation.
Ensure all information systems lifecycle management documentation are maintained.
Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
Assist and conduct security IS education and training.
Participate in internal/external security audits/inspections; performs risk assessments.
Assist in conducting investigations of computer security violations and incidents.
Ensure proper protection and corrective measures are taken when an incident or vulnerability has been discovered.
Implement and enforce Information Security Policies and Procedures together with ISSM and CPSO.