Standard Job Description

Lockheed Martin is seeking a junior Cyber Systems Security Engineer for engineering and IT cybersecurity. This Enterprise Operations role supports Lockheed Martin Space Information Security Office supporting the LM Space Business Area. 

What You Will Be Doing:
In this role, you will be responsible for conducting threat analysis and modeling, defining security requirements, analyzing and testing the environment against the requirements, recommending remediation for identified risks, documenting the security posture of the environment, including unmitigated risks. Additionally, you will provide security engineering designs and implementation in all aspects of Information Assurance, Information Security (InfoSec), and Network Security Engineering. You will assess and mitigate system security threats/risks throughout the program life cycle; validate system security requirements definition and analysis; establish system security designs; implement security
designs in hardware, software, data, and procedures; verify security requirements; perform system certification and accreditation planning and testing and liaison activities; and
support secure systems operations and maintenance.

Further Information About This Opportunity:
This role is mostly remote with occasional support needed onsite at LM Space locations.  Preference is for location alignment to these locations:

• Huntsville, AL
• King of Prussia, PA
• Titusville, FL
• Denver, CO
• Sunnyvale, CA

US Citizenship is required, with eligibility for Secret clearance. 

In light of current internal business pressures, priority consideration will be given to qualified candidates who are currently affiliated with the Enterprise Operations’ EBDT  Enterprise Business & Digital Transformation) organization. #EBDT

Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns. Develop, evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain. Coordinate with Cyber and system architects and developers to provide oversight in the development of solutions. Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Employs cyber security processes, methods, techniques and tools and assure their consistent application. Implements appropriate Assessment and Authorization activities as required by customers.

Basic Qualifications

• Experience in Information Assurance and security engineering principles (application security, security testing, computer security, etc)
• Strong understanding of the 7 layers of Open Systems Interconnection model
• Experience or familiarity with DevSecOps
• Familiary with forward and reverse web proxies and stateful firewalls
• Substantial knowledge of networking principles (routine protocols, layer 2 switching, wireless networks, etc)
• Familiarity with security controls and encryption
• Familiarity with Identity and Access Management principles used for authentication (public key cryptography, PKI certifications, etc)
• Familiarity or experience with AWS & elastic computing principles (including physical/cloud security architectures, software defined network constructs, etc)
• Familiarity or experience with Threat Models such as STRIDE and threat modeling techniques
• Strong communication and collaboration skills
• US Citizenship with eligibility for DoD Secret Clearance 

Desired Skills

• Experience or familiarity with software development
• Knowledge of LM security policies and Information Protection Manual (IPM).
• CISSP, CISM or other relevant security certification
  • Working knowledge of LM scanning and vulnerability remediation, CyRIS and exception processes.
• Knowledge of Cyber DFARS, CMMC, NIST, SP 800 series and FIPS
• Knowledge of networks, especially enterprise grade 802.11 architectures.
• Familiarity with Hashing, Salting, and other cryptographic methodologies and approaches.
• Understanding of OWASP Top 10 Web Application Security Risks and their countermeasures
• Understanding of the SANS Top 25 Most Dangerous Software Errors and their countermeasures
• Experience analyzing the security posture of a system from hardware, networking, and software perspectives
• Understanding of common enterprise services as it intersects with large scale corporate networks
• Active DoD Secret Security Clearance