Information Systems Security Manager
Role details
Job location
Tech stack
Job description
- Coordinating and managing interactions with government accreditation authorities to facilitate and maintain 100% active accreditation status of all Authorization to Operate.
- Overseeing technical administration of information system in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF) to include Continuous Monitoring, Plan of Action and Milestones (POA&M), and Change Management.
- Developing and implementing government-approved information security procedures and system security plans for the operation of networked and standalone classified computers systems.
- Communicating, implementing, and managing a formal Information Security / Information Systems Security Program together with the Facility Security Officer (FSO) and Program Management.
- Overseeing and conducting risk assessments on cybersecurity architecture and perform comprehensive investigations of computer security incidents, collaborating with outside agencies as required.
Other Key Responsibilities and Challenges of this role include:
- Acquisition, training, development and retention of a technical team of security professionals that are responsible for ongoing compliance of accredited classified computing environments.
- Planning, implementing, monitoring, and upgrading security measures for the protection of the program data, non-deliverable systems, and networks.
- Troubleshooting technical security and network problems.
- Participate in planning and implementation of current and future security domains including those which may introduce new service areas (i.e., Cloud Computing, DevSecOps, etc.).
- Handling mission requirements which may drive unpredictable work hours/schedules
- Working in a high paced environment driven by growing and ever-changing technical implementation requirements
Requirements
-
MUST BE A U.S. CITIZEN - This position is located at a facility that requires special access
-
Current Top Secret security clearance with investigation or CV date within 5 years, with ability to pass a Counterintelligence Polygraph
-
Ability to successfully complete additional enhanced security review in accordance with Government contract requirements and it is a condition of employment that individuals hired into positions requiring program clearance obtain and maintain such clearance within sufficient time to allow Lockheed Martin to meet its business needs
-
Knowledge of PL3 accreditation processes
-
Clearance requirement
-
Experience working directly with Government customers and Approval Authorities o Strong written and verbal communication, analytical, troubleshooting, and interpersonal skills o Ability to work with multiple customers and foster collaborative team environments o Experience in SAP/SCI/Collateral environments and knowledge of government contractor network interconnectivity arrangements
-
Expertise with the Risk Management Framework (RMF) o Deep understanding of the NIST Risk Management Framework and the ability to author and maintain SSPs, POA&Ms, and security assessment packages o Direct experience implementing NIST SP800 53 security controls
-
Proficiency with core cyber security tools, (e.g., Splunk, Trellix ePO, ACAS/TenableSC) Desired Skills:
-
8+ years of related experience and may have a post-secondary degree or training in a related discipline
-
Prior ISSM/ISSO experience while collaborating with a team of ISSOs in order to satisfy requirements and goals
-
PL3 environment experience
-
DevSecOps o Hands on expertise in DevSecOps practices and AI integration for security operations o Hands on experience with Infrastructure as Code tools (Terraform, AWS CloudFormation, Azure ARM, Ansible) and the ability to review and harden IaC templates for compliance o Proven expertise in DevSecOps practices, including secure CI/CD pipeline design, automated security testing, and vulnerability management
-
High Performance Computing environments o Hands on experience in information system security or a comparable cyber security role, specifically supporting HPCC or large-scale distributed systems
-
Prior experience leading or managing teams
-
Prior experience as a Security Controls Assessor (SCA)
-
Familiarity with orchestration tools, e.g.: o Kubernetes, Palette, Harness, Flux, Openshift, Rancher, Docker
-
Familiarity with Qmulos
-
Proficiency with the ELK stack for log aggregation, analysis, and visualization in a classified environment
-
Capacity to manage multiple projects in a fast paced, demanding setting
-
Experience with complex operating systems, data center and cloud environments, cross domain solutions, and NSA Type1/Commercial Solutions for Classified (CSfC) encryption
-
Strong Linux background (RHEL, Rocky, CentOS or similar) for system administration, kernel hardening, package management, and security focused configurations
-
Proven ability to conduct internal/external customer assessments, identify gaps, and develop corrective action plans
-
Proven track record hardening Windows and RHEL systems using approved DISA STIGs/SRGs and implementing NIST SP800 53 controls Security Clearance Statement: This position requires a government security clearance, you must be a US Citizen for consideration. Clearance Level: Top Secret with Investigation or CV date within 5 years, Ability to Work Remotely: Onsite Full-time: The work associated with this position will be performed onsite at a designated Lockheed Martin facility.
Benefits & conditions
Work Schedules: Lockheed Martin supports a variety of alternate work schedules that provide additional flexibility to our employees. Schedules range from standard 40 hours over a five day work week while others may be condensed. These condensed schedules provide employees with additional time away from the office and are in addition to our Paid Time off benefits. Schedule for this Position: 4x10 hour day, 3 days off per week Lockheed Martin is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics. The application window will close in 90 days; applicants are encouraged to apply within 5 - 30 days of the requisition posting date in order to receive optimal consideration. At Lockheed Martin, we use our passion for purposeful innovation to help keep people safe and solve the world's most complex challenges. Our people are some of the greatest minds in the industry and truly make Lockheed Martin a great place to work.
With our employees as our priority, we provide diverse career opportunities designed to propel, develop, and boost agility. Our flexible schedules, competitive pay, and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. We place an emphasis on empowering our employees by fostering an inclusive environment built upon integrity and corporate responsibility.