Information Systems Security Officer (ISSO) - LVL 3

Standard Job Description

At Lockheed Martin Aeronautics (LMA), we approach each day with creativity, innovation, and integrity. We hire people with a broad set of technical skills who are ready to take on some of industry's greatest challenges and make an impact on our nation's security.

The selected candidate will join the LMA Classified Cybersecurity Team as an Information Systems Security Officer (ISSO) on-site at Fort Worth, Texas. As an ISSO supporting Special Access Programs (SAPs), you will ensure classified information systems meet cybersecurity requirements and government directives. You will collaborate with the Information Systems Security Manager (ISSM) and leverage your technical skills to:

• Carry out technical Information Assurance (IA) in accordance with internal Lockheed Martin and customer security requirements, primarily Risk Management Framework (RMF).
• Develop system documentation for information system authorization, security management, and continuous monitoring (CONMON) of both networked and standalone information systems (e.g., Authorization To Operate (ATO), System Security Plan (SSP), Plans of Actions and Milestones (POAM), etc.).
• Develop and/or consult on technical solutions to complex problems which require extensive technical expertise and ingenuity.
• Collaborate with program security, cyber management, senior level internal (i.e. Program Managers) and external customers (i.e. government Security Control Assessors (SCAs)), as well as other applicable stakeholders to identify requirements and provide problem resolution i.e. balancing customer demands with security compliance.
• Ensure that selected security controls are implemented and operating as intended during all phases of the information systems lifecycle.
• Perform security monitoring/auditing, vulnerability risk assessments, assured file transfers, hardware/software configuration management, data integrity containments, media management, and investigations on security violations/incidents.
• Participate in the implementation of current and future security domains (e.g. DevSecOps, AI, Cloud Computing etc.)
• Provide cybersecurity education and training for all system users on appropriate risk mitigation strategies.
• Perform other associated duties as required.

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Basic Qualifications

• U.S. Citizenship.
• Active Top Secret (TS) Clearance with an investigation or Continuous Vetting (CV) date within 5 years.
• Prior experience supporting Special Access Programs (SAP) security environments.
• Possess a minimum of 3 years experience as an ISSO or ISSM.
• Advanced knowledge/experience in the assessment of a comprehensive cybersecurity program to include risk management, reviewing system security plans (SSP)s and associated artifacts (e.g., POAMs, etc.), reviewing system/network audits, and remediating cyber-incidents.
• Possess a DoD 8140 722-Information Systems Security Manager (ISSM)-Intermediate or Advanced Certification i.e. Security+, CISSP, etc.

Desired Skills

• Experience providing technical security expertise and oversight for complex classified networked environments in collaboration with customers, Information Technology (IT) Department, and other functional support departments.
• Ability to select, configure, and operate security technologies, including security information and event management (SIEM), data loss prevention (DLP), vulnerability assessment tools, etc.
• Ability to juggle the demands of multiple diverse customers while formulating & driving security direction.
• Ability to work in a team environment, demonstrate excellent problem-solving abilities, be well organized, flexible, and self-motivated.
• Strong interpersonal and communication skills.

Pay Information

Full-Time Salary Range: $85300.00 - $158300.00

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow-both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate''s work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.