Information Systems Security Specialist

BigBear.ai; Columbia (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

Ask Sage, a BigBear.ai company, seeks an Information Systems Security Specialist to safeguard our platform. You will support day-to-day security operations, maintain the SSP, and drive FedRAMP High and DoD IL5 compliance efforts.

You will collaborate with engineering, operations, and compliance to integrate security into all platform aspects, manage incidents, and report on remediation progress to leadership.

Qualifications

• 5–8 years of IT, cybersecurity, or security authorization experience.
• IAM Level I certification.
• Bachelor's degree in Computer Science, Cybersecurity, or IT Engineering (4 additional years may substitute for degree).
• Familiarity with commercial security products, security authorization techniques, incident management, and PKI.

Responsibilities

• Support day-to-day security operations to maintain a strong operational security posture across the Ask Sage platform.
• Develop, maintain, and update the System Security Plan (SSP) and other cybersecurity documentation.
• Support FedRAMP High and DoD IL5 compliance activities, including continuous monitoring and audits.
• Conduct and support risk assessments to identify security and compliance issues and mitigate them.
• Develop and enforce information security policies, standards, and procedures aligned with regulations.
• Collaborate with engineering, operations, and compliance to integrate security requirements.
• Support security incident management activities, including detection, response, and documentation.
• Track and report on compliance metrics and remediation status for senior stakeholders.

Skills

IT security experience

Security tools knowledge

Encryption tools

Communication protocols

PKI & authorization services

Education

Bachelor's degree in Computer Science or related field

Tools

FedRAMP

DoD IL5

Job description

Residency

All applicants must currently reside in the United States

Overview

Ask Sage, a BigBear.ai company, is the leading Generative AI platform that augments the velocity of government and commercial teams with dozens of use cases, from coding to cybersecurity to acquisition to data analysis and beyond. Our secure platform delivers cutting-edge technology that enables teams to focus on strategic initiatives while we take care of the heavy lifting. We are seeking an Information Systems Security Specialist to help safeguard the information systems behind our revolutionary platform.

What you will do

Key Responsibilities:

• Support day-to-day security operations to maintain a strong operational security posture across the Ask Sage platform.
• Develop, maintain, and update the System Security Plan (SSP) and other Cybersecurity documentation.
• Support FedRAMP High and DoD IL5 compliance activities, including continuous monitoring and preparation for and participation in regular audits and assessments.
• Conduct and support risk assessments to identify potential security and compliance issues, and help implement strategies to mitigate them.
• Assist in the development, implementation, and enforcement of information security policies, standards, and procedures aligned with federal regulations and best practices.
• Collaborate with cross-functional teams - including engineering, operations, and compliance - to ensure security requirements are integrated into all aspects of the platform.
• Support security incident management activities, including detection, response, and documentation.
• Track and help report on compliance metrics and remediation status to support senior stakeholders.

What you need to have

• 5-8 years of combined work-related experience in IT, cybersecurity, or security authorization
• IAM Level I certification
• Bachelor's degree in Computer Science, Cybersecurity, or IT Engineering (four (4) additional years of related work experience may substitute for the degree)
• Experience in several of the following areas:
  • Knowledge of current security tools
  • Hardware/software security implementation
  • Communication protocols
  • Encryption tools and techniques
• Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
• Eligible to obtain and maintain a DoD Clearance.

What we'd like you to have

• Hands-on experience supporting FedRAMP High and/or DoD IL5 compliance efforts
• Experience with continuous monitoring, System Security Plan (SSP) maintenance, and security authorization (ATO) processes
• Familiarity with cloud-based SaaS environments and modern security operations.

Pay transparency

Please note the targeted compensation range is provided as an estimate, and any actual compensation offer may vary depending on the needs of the company, or an applicant's skillset, competencies, experience, education, certifications, location, or other factors. The estimated range does not include the value of any benefits offered.

About BigBear.ai

BigBear.ai is a leading provider of AI-powered decision intelligence solutions for national security, supply chain management, and digital identity. Customers and partners rely on Bigbear.ai's predictive analytics capabilities in highly complex, distributed, mission-based operating environments. Headquartered in McLean, Virginia, BigBear.ai is a public company traded on the NYSE under the symbol BBAI. For more information, visit https://bigbear.ai/ and follow BigBear.ai on LinkedIn: @BigBear.ai and X: @BigBearai.

BigBear.ai is an Equal opportunity employer all protected groups, including protected veterans and individuals with disabilities.