DirectJobHub
Jobs · OTHR · Colorado

Mid-Career Information System Security Officer

Lockheed Martin · Littleton, CO · 2 mo ago
OTHR$96k–$178k/yrFull-time

About the role

The Information System Security Officer will ensure compliance through the implementation of mandatory information system security requirements on assigned information systems utilizing various government guidance publications.

Responsibilities

  • Coordinate and manage interactions with government partners to facilitate and maintain 100% active status of all Authorizations to Operate.
  • Oversee technical administration of information systems in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF) to include Continuous Monitoring, Plan of Action and Milestones (POA&M), and Change Management.
  • Develop and implement government-approved information system security procedures and system security plans for the operation of networked and standalone classified systems.
  • Communicate, implement, and manage a formal cybersecurity program.
  • Oversee and conduct risk assessments on cybersecurity architecture and perform comprehensive investigations of computer security incidents, collaborating with outside agencies as required.
  • Ensure configuration management (CM) for security-relevant software, hardware, and firmware.
  • Afford cybersecurity education and training.
  • Assist in conducting investigations of computer security violations and incidents.
  • Handle mission requirements which may drive unpredictable work hours/schedules.

Requirements

  • Active Secret security clearance.
  • Ability to obtain and maintain TS/SCI clearance.
  • DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CySA+, CCNA Security, CND).
  • Proven hands on experience with industry standard cybersecurity tools, including vulnerability scanners (e.g., Tenable), Security Incident and Event Management (SIEM) and auditing platforms (e.g., Splunk), endpoint protection solutions (e.g., Trellix), and package submission tools (e.g., eMASS, XACTA).
  • Demonstrated ability to lead the Risk Management Framework (RMF) process to secure Authorizations to Operate (ATO), encompassing Defense Counterintelligence and Security Agency (DCSA) authorizations.
  • Strong technical root cause analysis skills with a track record of developing corrective actions, policies, and procedures to resolve discrepancies.
  • Experience conducting risk and vulnerability assessments in line with applicable regulations, such as the DCSA Assessment and Authorization Guide (DAAG), National Industrial Security Program Operating Manual (NISPOM), NIST Special Publication (SP) 800-53, and various DISA Security Technical Implementation Guides (STIGs).

Qualifications

  • DoD 8570/8140 IAM Level II certification (e.g., CISSP, CISM, CASP+/SecurityX) is desired.
  • Proven track record of deploying and integrating complex, multi-classification technologies across large-scale, enterprise-wide environments.
  • Network device administration experience to include security best practices and monitoring of firewall, routers, and switches.
  • Direct experience with the Signals Reconnaissance program.
  • Strong background in Agile and DevSecOps methodologies and associated toolsets (e.g., JIRA, Confluence, Docker, Ansible, Git).
  • In-depth knowledge of the NISPOM and the DAAG.
  • Familiarity with key security frameworks and guidelines, including the Joint Special Access Program (JSIG) Implementation Guide, CNSSI 1253, and NIST SP 800-37 (Risk Management Framework).
  • Experience with containerization.
  • Proficient in AI prompting as it applies to this position and practice.

Skills

  • DoD 8570/8140 IAM Level II certification (e.g., CISSP, CISM, CASP+/SecurityX) is desired.
  • Proven track record of deploying and integrating complex, multi-classification technologies across large-scale, enterprise-wide environments.
  • Network device administration experience to include security best practices and monitoring of firewall, routers, and switches.
  • Direct experience with the Signals Reconnaissance program.
  • Strong background in Agile and DevSecOps methodologies and associated toolsets (e.g., JIRA, Confluence, Docker, Ansible, Git).
  • In-depth knowledge of the NISPOM and the DAAG.
  • Familiarity with key security frameworks and guidelines, including the Joint Special Access Program (JSIG) Implementation Guide, CNSSI 1253, and NIST SP 800-37 (Risk Management Framework).
  • Experience with containerization.
  • Proficient in AI prompting as it applies to this position and practice.

Pay

Full-Time Salary Range: $95900.00 - $178100.00

At Lockheed Martin, we consider factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, and market/work location and business considerations when extending an offer. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.

For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.

Similar jobs