Cyber Security Engineer Technical Lead

Lockheed Martin•Springfield, VA

2d•Onsite

About The Position

The coolest jobs on this planet... or any other... are with Lockheed Martin Space. At the dawn of a new space age, Lockheed Martin Space is a pioneer, partner, innovator, and builder. Our amazing people are on a mission to make a difference in the world. Every single day, we use our unique skills and experiences to craft, design, and build solutions to some of the world's hardest engineering problems. Our culture inspires our employees to dream big; perform with excellence; and build incredible products. We provide the resources, the support, and the focus. You bring the passion and courage to envision limitless possibilities. Together, we'll build a better tomorrow. Are you ready to further your career in Cyber Security by working for one of the top companies in the world? The Kayenne program is seeking a Cyber Security Engineer technical lead for the Program’s Cyber Team. This team is responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. The desired candidate will be able to conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. They will also evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain. Furthermore, they will conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements, and employ cyber security processes, methods, techniques and tools and assure their consistent application. Finally, they will implement appropriate Assessment and Authorization activities as required by customers. As the Cyber Technical Lead, you will coordinate with multiple teams across the Kayenne program in an Agile team environment. You will interface with our Operations, Development, Deployment, and Systems Engineering teams, and will help to derive innovative solutions to complex technical problems to provide our customers with a secure system and new capabilities. In addition, you will interface and collaborate cross-functionally with government personnel, customer partners, subcontractors, local engineers, and geographically dispersed teammates. In this role, you will also perform the following:

Requirements

DOD 8570/8140 IAT Level II Certification.
Experience with Authorization and Accreditation processes using Risk Management Framework methodologies.
Experience with DoD cybersecurity requirements, policies, and procedures.

Nice To Haves

Experience performing cybersecurity accreditation activities in support of software and system requirements, design, development, testing, and sustainment of approvals - Authority To Operate
Experience with NetBrain, Zenoss and Hewlett Packard Network Automation (HPNA)
Familiar with eMASS, HBSS, ACAS, SCAP Compliance Checker (SCC), DISA STIGs
Experience with Secure Configuration/Hardening of DoD Information Systems
Experience with Intel Driven Threat Modeling, preferably classified Cyber Threat Intel Support
Experience briefing complex cyber security principles to all levels of knowledge and skill
Experience briefing high level customer stakeholders with cyber security concerns and remediation tactics
Knowledge of NIST 800-53
Experience with RHEL and Windows Server/Professional
Experience with SIEM and cloud technologies including LogRhythm, Splunk, Jira, and Confluence
DoD 8570/8140 IAT II Certification
Ability to provide guidance on DoD Cyber regulations and requirements to engineering and software development staff
Experience with responding to cyber incidents from detection through remediation.
Intuitive and proactive self-starter that’s accountable and mission focused.

Responsibilities

POA&M Workoff Plan & Execution
EVSS Admin/System Vulnerability Audit/Analysis/Compliance/Remediation
Body of Evidence (BoE) Definition for customer assets as driven by change requests
Demonstration Test Plan (DTP) definition and execution
System Change Request and Software Build Technical Investigations
New and Version Upgraded COTS/GOTS Software Review and Security Risk assessment
Daily System Audit Analysis and Log Review
IATT/CONOPS definitions and approvals
Security Design and Architecture
STIG Hardening Guidance
Security Test Definition, Execution, and Gov. Witness Testing and Test Report Generation
Govt. Audit Support
Security Tool Design and System integration Support