Information Systems Security Officer

Lockheed Martin•Owego, NY

2d•Onsite

About The Position

Lockheed Martin’s, Rotary & Mission Systems (LM RMS), Security and Emergency Services department invites you to step up to one of today’s most daunting challenges: the protection of exquisite government capabilities leading to warfighter supremacy against our peer and near peer adversaries. As a security professional at Lockheed Martin, you’ll safeguard the sensitive information and warfighting capabilities that our citizens and the world depend upon to protect U.S. and ally interests. Here, you’ll work alongside other security experts and military members to support their military operational objectives by providing them with a safe and secure operating environment. In this fast-paced, real-world environment, you’ll draw on all your education and experience as well as the resources of Lockheed Martin to keep these exquisite capabilities protected. The Work: This position is located in Owego, NY and will support multiple programs. As a Classified Cyber Security /ISSO, you will be responsible for overseeing day-to-day information system security operations, including auditing and compliance with internal LM and customer security requirements. You will also be responsible for technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF). In support of our US Marine Corps, US Navy, and US Air Force customers, the ISSO will support all aspects of the information security program and continue a strong history of success. Why Join Us: Your Health, Your Wealth, Your Life With our employees as our top priority, we provide unique career opportunities designed to propel development and boost agility. Our flexible schedules, competitive pay, and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. At Lockheed Martin, we place an emphasis on empowering our employees by fostering innovation. At Lockheed Martin, we use our passion for purposeful innovation to help keep people safe and solve the world's most complex challenges. Our people are some of the greatest minds in the industry and truly make Lockheed Martin a great place to work. With our employees as our priority, we provide diverse career opportunities designed to propel, develop, and boost agility. Our flexible schedules, competitive pay, and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. We place an emphasis on empowering our employees by fostering an inclusive environment built upon integrity and corporate responsibility. If this sounds like a culture you connect with, you’re invited to apply for this role. Or, if you are unsure whether your experience aligns with the requirements of this position, we encourage you to search on Lockheed Martin Jobs , and apply for roles that align with your qualifications. Other Important Information By applying to this job, you are expressing interest in this position and could be considered for other career opportunities where similar skills and requirements have been identified as a match. Should this match be identified you may be contacted for this and future openings.

Requirements

5 years of Cybersecurity/Information Assurance experience
Keen attention to detail and adherence to established security policies
Excellent verbal and writing skills
Experience managing and implementing the ATO Lifecyle utilizing eMASS or other technologies
First-hand experience performing Information System audits
Experience with system certification and continuous monitoring
Information System account and asset management experience
Knowledge of and previous use of NIST SP 800-37 Risk Management Framework (RMF), and/or NIST SP 800-53 Security and Privacy Controls requirements
IAT II Level Certification (e.g., COMPTIA Security +)
This position requires a government security clearance, you must be a US Citizen for consideration.

Nice To Haves

Prior Information System Security Officer (ISSO), or administrator experience.
Experience working with DCSA RMF implementation.
Hands-on experience with industry standard Information Assurance tools such as STIG Viewer, SCC Tool, and Splunk.
Experience performing security system hardening, analysis, vulnerability management, DISA STIGs.
Proven ability to build and maintain effective relationships with multiple customers, including Government & other groups within LM.

Responsibilities

Oversee day-to-day information system (IS) security operations including hardware and software implementations.
Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
Auditing of the IS.
Upkeep, monitor, analyze, and respond to network and security events.
Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M) with the Information Systems Security Manager (ISSM) to address non-compliance in the allotted time frame.
Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
Ensure configuration management (CM) for security-relevant IS software, hardware, and firmware is maintained and documented in accordance with baseline.
Ensure all information system security-related documentation is current and accessible to properly authorized individuals.
Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
Assist and conduct IS security education.
Participate in internal/external security audits/inspections; perform risk assessments.
Inform ISSM on technical IS security matters.
Assist in conducting investigations of computer security violations and incidents, reporting as necessary to both the Program Security Representative (PSR) and Program Managers.
Ensure proper protection and/or corrective measures have been taken when an incident or vulnerability has been discovered.
Communicate, implement and manage a formal Information Security/Information Systems Security Program together with ISSM and PSR.
Implement and enforce Information Security Policies and Procedures together with ISSM and PSR.
Review and oversee RMF Package authorizations with the ISSM.