Job description

Standard Job Description As an F-35 Classified Cybersecurity Security team member you will be supporting Special Access Programs (SAPs) and ensure classified Information Systems (IS) meet cybersecurity requirements and government directives by interpreting the Joint Special Access Program (SAP) Implementation Guide (JSIG) in determining technical Information Assurance (IA) requirements and ensure proper security implementation of the Risk Management Framework (RMF). Perform system vulnerability risk assessments, Assured File Transfers, hardware/software configuration management, media management, data integrity containments and investigations on IA related security violations/incidents, to include updating the Configuration and Media Management Databases. Develop system documentation for information system authorization, security management, and continuous monitoring of both networked and standalone classified systems. Ensure security tool functionality across interconnected WANs, ISOLAN, standalones, and Lab environments. Determine technical Information Assurance (IA) requirements and ensure proper security implementation of the Risk Management Framework (RMF). Identify systems and tools to improve security. Work through procurement and with the administration teams to deploy the security tools, configure, and maintain them. Develop technical solutions to complex problems which require extensive technical expertise and ingenuity. Provide cybersecurity education and training for all system users on risk mitigation strategies. Conduct required internal IA assessments of the F-35 Classified networks and SAP Facilities (SAPFs) along with interpreting and implementing the policies and procedures required to maintain an Authority to Operate (ATO) and coordinate the destruction of classified material and media. Collaborate with F‑35 supplier organizations to prepare, review, and submit ATO documentation; facilitate monthly meetings, train ISSOs on SAPF Equipment Removal Packages, software/hardware approvals, and ATO evidence; act as liaison between government customers and suppliers. Represent the organization as a Subject Matter Expert in Information Assurance requirements. Perform other associated duties as required. Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121). Basic Qualifications Professional experience configuring Cybersecurity tools (i.e. Nessus, Splunk, QMULOS, EPO) Possess a minimal DoD 8140 IAM Level I certification (i.e. Security + CE, GSLC) Experience applying the Risk Management Framework (RMF) and JSIG or NIST SP 800-53 controls to classified information systems Experience developing and maintaining security authorization documentation (SSP, SCTM, POA&M, continuous monitoring plans) Desired Skills Experience supporting Special Access Required (SAR) environments Experience tracking and maintaining the security posture of systems which are reportable to the US Government Experience with Windows and Linux system configuration / hardening Prior experience serving as an ISSO or ISSM on SAP or collateral classified systems Scripting experience (PowerShell, Python) to automate compliance checks, auditing, and reporting Experience working directly with government Authorizing Officials and supplier ISSMs on ATO packages Strong written and verbal communication skills, with experience training end users and ISSOs Pay Information Full-Time Salary Range: $85300.00 - $158300.00 At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally. The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer. Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability. • Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics. • For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.

Requirements

Must-haves

Standard Job Description
Represent the organization as a Subject Matter Expert in Information Assurance requirements.
Perform other associated duties as required.
Professional experience configuring Cybersecurity tools (i.e. Nessus, Splunk, QMULOS, EPO)
Possess a minimal DoD 8140 IAM Level I certification (i.e. Security + CE, GSLC)
Experience applying the Risk Management Framework (RMF) and JSIG or NIST SP 800-53 controls to classified information systems
Experience developing and maintaining security authorization documentation (SSP, SCTM, POA&M, continuous monitoring plans)
Experience supporting Special Access Required (SAR) environments

Nice-to-haves

Experience tracking and maintaining the security posture of systems which are reportable to the US Government
Experience with Windows and Linux system configuration / hardening
Prior experience serving as an ISSO or ISSM on SAP or collateral classified systems
Scripting experience (PowerShell, Python) to automate compliance checks, auditing, and reporting
Experience working directly with government Authorizing Officials and supplier ISSMs on ATO packages
Strong written and verbal communication skills, with experience training end users and ISSOs
Pay Information

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: eightfold
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Parental Leave