Cyber Software Engineer II

The Cyber Software Engineer(level 2) is a mid‑level role that requires owning security outcomes across the product lifecycle. In this position you will lead the definition of security architecture for new features and major refactors, conduct threat‑modeling investigations, and translate product requirements into concrete security controls. Responsibilities include spearheading comprehensive vulnerability assessments (static, dynamic, and dependency‑scanning), prioritizing vulnerability remediation, and ensuring continuous compliance with frameworks such as NIST, ISO27001, and DoD RMF. The Cyber Software Engineer (level 2) will design, develop, and maintain advanced Python‑based automation that embeds security gates, secret scanning, policy‑as‑code, and automated remediation into CI/CD pipelines (GitLab, DevOps, Jenkins), and will evaluate emerging tools (SBOM generators, runtime protection platforms) for enterprise adoption. Authoring clear, detailed security design documents, runbooks, and stakeholder‑facing briefs is a core expectation, as is mentoring junior engineers on secure coding practices, code‑review techniques, and security testing. Collaboration is central as you will work closely with product owners, system and software architects, DevOps, QA, and operations teams to ensure that secure, cyber‑centric features are delivered on schedule and that security considerations are baked into sprint planning and release cycles. To succeed at this level, candidates should have 3–5 years of software development in a cybersecurity environment with a strong focus on security, deep knowledge of OWASP ASVS, NIST CSF, MITRE ATT&CK, and secure coding standards, and hands‑on expertise with SAST/DAST tools, container security scanners, and infrastructure‑as‑code platforms. In addition to technical proficiency, this role must demonstrate strong analytical and communication skills, the ability to influence cross‑functional teams, and a commitment to mentorship and continuous learning. Basic Qualifications Ability to obtain and maintain a SECRET security clearance. Possess or ability to obtain a CompTIA Security+ certification (or DoDM 8140.03 equivalent or higher certification) within 90 days of hire. Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Software Engineering, or a closely related technical discipline. A Master’s degree or equivalent advanced coursework in security‑focused subjects is a plus. 3–5 years of hands‑on software development experience with a demonstrable focus on security. Experience should include work on modern codebases (Python, Go, C/C++, or Java) and participation in secure‑by‑design projects. Proven experience with Linux Command Line Interface (CLI) and Bash shell. Proven experience conducting static application security testing (SAST), dynamic application security testing (DAST), dependency‑chain scanning, and threat modeling. Familiarity with tools such as SonarQube, CodeQL, Burp Suite, Trivy, or similar. Desired Skills Familiarity with National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF), Risk Management Framework (RMF), and/or Secure Software Development Framework (SSDF). Familiarity with Defense Information Systems Agency (DISA), Center for Internet Security (CIS), International Organization for Standardization (ISO), or equivalent cyber security standards providers. Practical knowledge of continuous integration/continuous delivery platforms (GitLab CI, Azure DevOps, Jenkins, GitHub Actions) and the ability to integrate security gates, automated scans, and policy‑as‑code into pipelines. Experience writing reusable Python automation scripts or modules is required. Strong command of Python for security tooling, plus competence in at least one additional language (e.g., Go, C/C++, Java) to understand and influence production code. Excellent written and verbal communication skills, with the ability to translate complex security concepts into clear documentation and to work effectively with product owners, architects, DevOps, QA, and other cross‑functional teams. Evidenced commitment to staying current on emerging threats, vulnerabilities, and industry best practices through self‑directed study, conferences, or participation in professional communities. Security Clearance Statement: This position requires a government security clearance, you must be a US Citizen for consideration. Clearance Level: Secret Ability to Work Remotely: Onsite Full‑time: The work associated with this position will be performed onsite at a designated Lockheed Martin facility. Work Schedules: Lockheed Martin supports a variety of alternate work schedules that provide additional flexibility to our employees. Schedules range from standard 40 hours over a five day work week while others may be condensed. These condensed schedules provide employees with additional time away from the office and are in addition to our Paid Time off benefits. Schedule for this Position: 4x10 hour day, 3 days off per week Pay Rate: The annual base salary range for this position in California, Massachusetts, and New York (excluding most major metropolitan areas), Colorado, Hawaii, Illinois, Maryland, Minnesota, New Jersey, Vermont, Washington or Washington DC is $86,100 - $151,800. For states not referenced above, the salary range for this position will reflect the candidate’s final work location. Please note that the salary information is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market and business considerations when extending an offer. Benefits offered: Medical, Dental, Vision, Life Insurance, Short‑Term Disability, Long‑Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Education Assistance, Parental Leave, Paid time off, and Holidays. This position is incentive plan eligible. Lockheed Martin is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics. Experience Level: Experienced Professional Business Unit: RMS Relocation Available: Possible Career Area: Cyber Security Engineering Type: Full‑Time Shift: First #J-18808-Ljbffr 慨正橡扯