Information Systems Security Manager / Classified Cyber Security Mgr

Lockheed Martin•Orlando, FL

2d•$134,000 - $236,325•Onsite

About The Position

Unleash your cybersecurity prowess to shield the heartbeat of technological evolution. Your role goes beyond securing products; it's about empowering the builders of tomorrow, whether they're on the frontlines, exploring the cosmos, or shaping industries. Lockheed Martin Enterprise Operations is seeking a Classified Cyber Security Manager and Information System Security Manager to join our team’s efforts in supporting and defending classified networks hosted at the corporate level. The Enterprise Operations team of cyber security professionals are Subject Matter Experts (SME) supporting Department of Defense (DoD) programs to ensure classified information systems meet cyber security requirements and government directives by auditing, detecting, analyzing and mitigating cyber threats across multiple Enterprise networks. The work that our team does can be summarized in this way: You will have a direct impact to national security, ultimately contributing to protecting your loved ones – this is dynamic, gratifying and impactful work! You will have the opportunity to engage in all aspects of the cyber discipline within our large organization & portfolio, often getting exposure to many projects You get to be a part of a company widely recognized as a top employer for women, people of color and veterans – a highly inclusive culture and ranked #13 in Forbes 2023 "World's Best Employers" You will have an opportunity to make a difference in your first year by: Coordinating and managing interactions with government accreditation authorities to facilitate and maintain 100% active accreditation status of all Authorization to Operate. Overseeing technical administration of information system in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF) to include Continuous Monitoring, Plan of Action and Milestones (POA&M), and Change Management. Developing and implementing government-approved information security procedures and system security plans for the operation of networked and standalone classified computers systems. Communicating, implementing, and managing a formal Information Security / Information Systems Security Program together with the Facility Security Officer (FSO) and Program Management. Overseeing and conducting risk assessments on cybersecurity architecture and perform comprehensive investigations of computer security incidents, collaborating with outside agencies as required.

Requirements

MUST BE A U.S. CITIZEN - This position is located at a facility that requires special access
Current Top Secret security clearance with investigation or CV date within 5 years, with ability to pass a Counterintelligence Polygraph
Ability to successfully complete additional enhanced security review in accordance with Government contract requirements and it is a condition of employment that individuals hired into positions requiring program clearance obtain and maintain such clearance within sufficient time to allow Lockheed Martin to meet its business needs
Knowledge of PL3 accreditation processes
Clearance requirement
Experience working directly with Government customers and Approval Authorities
Strong written and verbal communication, analytical, troubleshooting, and interpersonal skills
Ability to work with multiple customers and foster collaborative team environments
Experience in SAP/SCI/Collateral environments and knowledge of government contractor network interconnectivity arrangements
Expertise with the Risk Management Framework (RMF)
Deep understanding of the NIST Risk Management Framework and the ability to author and maintain SSPs, POA&Ms, and security assessment packages
Direct experience implementing NIST SP 800 53 security controls
Proficiency with core cyber security tools, (e.g., Splunk, Trellix ePO, ACAS/Tenable SC)

Nice To Haves

8+ years of related experience and may have a post-secondary degree or training in a related discipline
Prior ISSM/ISSO experience while collaborating with a team of ISSOs in order to satisfy requirements and goals
PL3 environment experience
DevSecOps
Hands on expertise in DevSecOps practices and AI integration for security operations
Hands on experience with Infrastructure as Code tools (Terraform, AWS CloudFormation, Azure ARM, Ansible) and the ability to review and harden IaC templates for compliance
Proven expertise in DevSecOps practices, including secure CI/CD pipeline design, automated security testing, and vulnerability management
High Performance Computing environments
Hands on experience in information system security or a comparable cyber security role, specifically supporting HPCC or large-scale distributed systems
Prior experience leading or managing teams
Prior experience as a Security Controls Assessor (SCA)
Familiarity with orchestration tools, e.g.:
Kubernetes, Palette, Harness, Flux, Openshift, Rancher, Docker
Familiarity with Qmulos
Proficiency with the ELK stack for log aggregation, analysis, and visualization in a classified environment
Capacity to manage multiple projects in a fast paced, demanding setting
Experience with complex operating systems, data center and cloud environments, cross domain solutions, and NSA Type 1/Commercial Solutions for Classified (CSfC) encryption
Strong Linux background (RHEL, Rocky, CentOS or similar) for system administration, kernel hardening, package management, and security focused configurations
Proven ability to conduct internal/external customer assessments, identify gaps, and develop corrective action plans
Proven track record hardening Windows and RHEL systems using approved DISA STIGs/SRGs and implementing NIST SP 800 53 controls

Responsibilities

Coordinating and managing interactions with government accreditation authorities to facilitate and maintain 100% active accreditation status of all Authorization to Operate.
Overseeing technical administration of information system in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF) to include Continuous Monitoring, Plan of Action and Milestones (POA&M), and Change Management.
Developing and implementing government-approved information security procedures and system security plans for the operation of networked and standalone classified computers systems.
Communicating, implementing, and managing a formal Information Security / Information Systems Security Program together with the Facility Security Officer (FSO) and Program Management.
Overseeing and conducting risk assessments on cybersecurity architecture and perform comprehensive investigations of computer security incidents, collaborating with outside agencies as required.
Acquisition, training, development and retention of a technical team of security professionals that are responsible for ongoing compliance of accredited classified computing environments.
Planning, implementing, monitoring, and upgrading security measures for the protection of the program data, non-deliverable systems, and networks.
Troubleshooting technical security and network problems.
Participate in planning and implementation of current and future security domains including those which may introduce new service areas (i.e., Cloud Computing, DevSecOps, etc.).