SIPRNet Information System Security Manager

Lockheed Martin is a Cyber Security pioneer, partner, innovator and builder. Our amazing employees are on a mission to make a difference in the world and every single day we use our unique skills and experiences to create, design and build solutions to some of the world’s hardest engineering problems. Do you want to be part of a culture that encourages employees to think big, perform with excellence and build incredible products? We provide the resources, inspiration and focus – if you have the passion and courage to dream big, then we want to build a better tomorrow with you. At Lockheed Martin Rotary and Mission Systems, we are driven by innovation and integrity. We believe that by applying the highest standards of business ethics and visionary thinking, everything is within our reach – and yours as a Lockheed Martin employee. Lockheed Martin values your skills, training and education. Come and experience your future! 

Classified Cybersecurity Analysts help secure lifesaving products and critical state of the art engineering and manufacturing systems by applying cutting edge cybersecurity principles. Rising to the challenge of building a more secure world for the warfighter, space exploration, climate sustainability and commercial use. The Cybersecurity Analyst will partner with the security team, program, and government customers to perform as an Information Systems Security Manager (ISSM) in King of Prussia, PA. 

The work that our SIPRNet Information System Security Managers (ISSMs) do can be summarized in this way: 

• You will have the opportunity to engage in all aspects of the cyber discipline. 

• It’s really a career, not just a job. 

You will have an opportunity to make a difference in your first year by: 

• Deliver security assessments with 100% accuracy – perform system security validations with 100% accuracy, verifying baselines and security configurations. 

• Maintain 100% active accreditation status of all Authorization To Operate (ATO) packages. 

• Maintain above 95% credentialed vulnerability scan rates. 

• Complete 100% Continuous Monitoring (ConMon) objectives for Classified Information Systems. 

• Effectively communicate with leadership to ensure awareness of progress of deliverables. 
• Effectively communicate with leadership to ensure awareness of progress of deliverables. 
• Other Key Responsibilities and Challenges of this role include: 
• Oversee day-to-day information system security operations including hardware and software implementations. 
• Upkeep, monitor, analyze, and respond to network and security events. 
• Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M) with the Information Systems Security Manager (ISSM) to address non‑compliance in the allotted time frame. 
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan. 
• There are areas with process inefficiencies – some tools to accomplish our mission may be lacking. 
• Auditing is a part of this role’s responsibility and can be time consuming. 
• Serve as the Information System Security Manager (ISSM) for SIPRNet environments, overseeing classification handling, security policy implementation, continuous monitoring, risk assessments, and incident response to protect classified information and ensure compliance with DoD/DIA security directives

• Must possess a DoD 8140/8570 IAM/IAT or IASAE Level III certification (e.g., CISSP, CCSP, CISSP-ISSAP, or CISSP-ISSEP). 

• Familiarity with and ability to apply NIST SP 800 53, CNSSI 1253, DoDI 8500.01/8500.02, RMF (or legacy DIACAP), and the DoD Cloud Computing Security Requirements Guide (CCSRG) as they pertain to SIPRNET environments. 

• Hands on experience with industry standard Information Assurance tools 

• Experience with developing, reviewing and maintaining RMF artifacts 

• Proven ability to work across multi disciplinary teams, present security posture to senior leadership, and coordinate with system owners, C&A officials, and DOD IA Service Providers (DISPs) to ensure compliance and timely remediation of findings. 

• Demonstrated technical experience in Windows and Linux based operating systems and command line 

• In-depth experience in system hardening, analysis, vulnerability management and SIPRNet 

• Experience implementing or validating Secure Technical Implementation Guidance (STIGs) 

• Risk Management Framework (RMF) expertise – ability to lead the RMF lifecycle (categorization, security control selection, implementation, assessment, authorization, and continuous monitoring). 

• Proficient in AI prompting as it applies to this position and practice.