Cyber Systems Security Engineer - Hybrid​/CO, CA, FL, AL, PA

Junior Cyber Systems Security Engineer

Lockheed Martin is seeking a junior Cyber Systems Security Engineer for engineering and IT cybersecurity. This Enterprise Operations role supports Lockheed Martin Space Information Security Office supporting the LM Space Business Area. In this role, you will be responsible for conducting threat analysis and modeling, defining security requirements, analyzing and testing the environment against the requirements, recommending remediation for identified risks, documenting the security posture of the environment, including unmitigated risks.

Additionally, you will provide security engineering designs and implementation in all aspects of Information Assurance, Information Security (Info Sec), and Network Security Engineering. You will assess and mitigate system security threats/risks throughout the program life cycle; validate system security requirements definition and analysis; establish system security designs; implement security designs in hardware, software, data, and procedures; verify security requirements; perform system certification and accreditation planning and testing and liaison activities;

and support secure systems operations and maintenance.

This role is mostly remote with occasional support needed onsite at LM Space locations. Preference is for location alignment to these locations:
Huntsville, AL;
King of Prussia, PA;
Titusville, FL;
Denver, CO;
Sunnyvale, CA US Citizenship is required, with eligibility for Secret clearance. In light of current internal business pressures, priority consideration will be given to qualified candidates who are currently affiliated with the Enterprise Operations' EBDT Enterprise Business & Digital Transformation) organization.

Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns. Develop, evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain.

Coordinate with Cyber and system architects and developers to provide oversight in the development of solutions. Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Employs cyber security processes, methods, techniques and tools and assure their consistent application. Implements appropriate Assessment and Authorization activities as required by customers.

• Experience in Information Assurance and security engineering principles (application security, security testing, computer security, etc)
• Strong understanding of the 7 layers of Open Systems Interconnection model
• Experience or familiarity with Dev Sec Ops
• Familiarity with forward and reverse web proxies and stateful firewalls
• Substantial knowledge of networking principles (routine protocols, layer 2 switching, wireless networks, etc)
• Familiarity with security controls and encryption
• Familiarity with Identity and Access Management principles used for authentication (public key cryptography, PKI certifications, etc)
• Familiarity or experience with AWS & elastic computing principles (including physical/cloud security architectures, software defined network constructs, etc)
• Familiarity or experience with Threat Models such as STRIDE and threat modeling techniques
• Strong communication and collaboration skills
• US Citizenship with eligibility for DoD Secret Clearance

• Experience or familiarity with software development
• Knowledge of LM security policies and Information Protection Manual (IPM)
• CISSP, CISM or other relevant security certification
• Working knowledge of LM scanning and vulnerability remediation, CyRIS and exception processes
• Knowledge of Cyber DFARS, CMMC, NIST, SP 800 series and FIPS
• Knowledge of networks, especially enterprise grade 802.11 architectures
• Familiarity with Hashing, Salting, and other cryptographic methodologies and…