Cyber Systems Security Engineer - Hybrid / CO, CA, FL, AL, PA

About the role

This Enterprise Operations role supports Lockheed Martin Space Information Security Office supporting the LM Space Business Area.

Responsibilities

• Conduct threat analysis and modeling
• Define security requirements
• Analyze and test the environment against the requirements
• Recommend remediation for identified risks
• Document the security posture of the environment, including unmitigated risks
• Provide security engineering designs and implementation in all aspects of Information Assurance, Information Security (InfoSec), and Network Security Engineering
• Assess and mitigate system security threats/risks throughout the program life cycle
• Validate system security requirements definition and analysis
• Establish system security designs
• Implement security designs in hardware, software, data, and procedures
• Verify security requirements
• Perform system certification and accreditation planning and testing and liaison activities
• Support secure systems operations and maintenance

Requirements

This role is mostly remote with occasional support needed onsite at LM Space locations. Preference is for location alignment to these locations: Huntsville, AL, King of Prussia, PA, Titusville, FL, Denver, CO, Sunnyvale, CA.

Qualifications

• US Citizenship with eligibility for DoD Secret Clearance
• Experience in Information Assurance and security engineering principles
• Strong understanding of the 7 layers of Open Systems Interconnection model
• Experience or familiarity with DevSecOps
• Familiarity with forward and reverse web proxies and stateful firewalls
• Substantial knowledge of networking principles
• Familiarity with security controls and encryption
• Familiarity or experience with AWS & elastic computing principles
• Familiarity or experience with Threat Models such as STRIDE and threat modeling techniques
• Strong communication and collaboration skills

Skills

• Experience or familiarity with software development
• Knowledge of LM security policies and Information Protection Manual (IPM)
• CISSP, CISM or other relevant security certification
• Working knowledge of LM scanning and vulnerability remediation, CyRIS and exception processes
• Knowledge of Cyber DFARS, CMMC, NIST, SP 800 series and FIPS
• Knowledge of networks, especially enterprise grade 802.11 architectures
• Familiarity with Hashing, Salting, and other cryptographic methodologies and approaches
• Understanding of OWASP Top 10 Web Application Security Risks and their countermeasures
• Understanding of the SANS Top 25 Most Dangerous Software Errors and their countermeasures
• Experience analyzing the security posture of a system from hardware, networking, and software perspectives

Benefits

• Medical
• Dental
• Vision
• Flexible work arrangements and schedules
• 401(k) match
• Paid time off
• Holidays
• Parental Leave
• EAP
• Flexible Spending Accounts
• Education Assistance
• Life Insurance
• Short-Term Disability
• Long-Term Disability