Information Systems Security Officer, Classified Cybersecurity

Lockheed Martin•Huntsville, AL

1d•Onsite

About The Position

The Classified Cybersecurity candidate will perform duties as an Information Systems Security Officer (ISSO) located at the Lockheed Martin Space Facility in Huntsville, AL. Candidate will typically have a Bachelors degree from an accredited college in a related discipline, with 1-5 years of professional experience. In this role you will oversee day-to-day information system security operations including assisting the ISSM on all technical security matters. You will carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF). You will participate in auditing and continuous monitoring of the IS, and review and oversee RMF Package authorizations. You will also upkeep, monitor, analyze, and respond to security events, and document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M). You will ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices. You will also ensure configuration management (CM) for security-relevant IS software, hardware, firmware, and system documentation, and ensure all information systems lifecycle management documentation are maintained. Additionally, you will assist and conduct security IS education and training, participate in internal/external security audits/inspections, and perform risk assessments. You will also assist in conducting investigations of computer security violations and incidents, and ensure proper protection and corrective measures are taken when an incident or vulnerability has been discovered. Finally, you will implement and enforce Information Security Policies and Procedures together with ISSM and other security professionals.

Requirements

Final Secret clearance with ability to attain Top Secret clearance.
DoD 8570 IAT Level II Certification.
Knowledge of Information Systems Security Officer duties.
Experience with IS auditing and investigations.
Basic understanding of infrastructure technologies and functionalities (e.g., Windows/Linux servers and workstations, Active Directory (AD), ePolicy Orchestrator, etc).
Basic experience with developing, reviewing, and maintaining RMF artifacts.

Nice To Haves

Experience with ESS/ENS, Qmulos, Splunk, Nessus, Security Center and SCAP.
Basic knowledge with Linux command line system navigation (RHEL 7 and up).
Basic knowledge with Windows Systems Administration (Windows 10, Server 2016 and up).
Experience supporting cybersecurity requirements under RMF.
Experience with tactical test environments.
Experience implementing or managing cyber security requirements on classified systems under NIST.

Responsibilities

Oversee day-to-day information system security operations including assisting the ISSM on all technical security matters.
Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
Participate in auditing and continuous monitoring of the IS.
Review and oversee RMF Package authorizations.
Upkeep, monitor, analyze, and respond to security events.
Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M).
Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
Ensure configuration management (CM) for security-relevant IS software, hardware, firmware, and system documentation.
Ensure all information systems lifecycle management documentation are maintained.
Assist and conduct security IS education and training.
Participate in internal/external security audits/inspections; performs risk assessments.
Assist in conducting investigations of computer security violations and incidents.
Ensure proper protection and corrective measures are taken when an incident or vulnerability has been discovered.
Implement and enforce Information Security Policies and Procedures together with ISSM and other security professionals.