Information Technology Security Specialist

Socket.dev; Oklahoma; On-site; USD 65,000 - 90,000; Full time

Job summary

SAIC is seeking an Information System Security Officer (ISSO), classified as the IT Security Specialist, Level I, to support security and compliance of information systems under a government contract. The role emphasizes RMF/NIST-based certification, continuous monitoring, vulnerability management, and collaboration with stakeholders to maintain secure operations.

You will assist in developing security documentation, perform risk assessments, and contribute to security audits, incident response

Qualifications

• Apply basic technical knowledge in support of system certifications, accreditations, and information security tasks under close supervision of senior staff.
• Experience with NIST and RMF frameworks, security compliance, continuous monitoring, and vulnerability management.

Responsibilities

• Apply basic technical knowledge in support of system certifications, accreditations, and information security tasks under close supervision of senior staff.
• Assist in developing, documenting, reviewing, and maintaining RMF security documentation, including SSPs, ISCPs, IRPs, BIAs, SCDs, CMPs, PIAs, POA&Ms, AMPs, and SIAs.
• Create, track, and maintain POA&Ms for multiple information systems; work with stakeholders and ISSMs to ensure accurate documentation, remediation, and communication throughout the POA&M lifecycle
• Assist in conducting risk analysis of planned and installed information systems to identify vulnerabilities and threats; recommend mitigation actions
• Assist in conducting vulnerability scanning of information systems; compile compliance reports based on scan findings; validate scan accuracy and identify false positive results
• Assist in the development of security contingency plans, disaster recovery procedures, and delivery of incident response training
• Gather artifacts and support Continuous Monitoring Assessments, Security Assessments, and internal/external security audits
• Provide cybersecurity guidance to project teams and stakeholders through system development, configuration, and maintenance
• Prepare and present status reports on findings, POA&M progress, and RMF activities to management and stakeholders

Skills

RMF experience

NIST frameworks

Vulnerability management

Information security

Job description

SAIC has an immediate opening for a highly motivatedInformation System Security Officer (ISSO), classified as theIT Security Specialist, Level Ilevel, supporting the security and compliance of information systems under a government contract.

Under close direction of a manager, team leader, or more experienced specialist, the incumbent will apply basic technical knowledge in the performance of system certifications/accreditations and information security-related tasks. The ideal candidate has experience with NIST and RMF frameworks, security compliance, continuous monitoring, and vulnerability management.

Key Responsibilities

• Apply basic technical knowledge in support of system certifications, accreditations, and information security tasks under close supervision of senior staff
• Assist in developing, documenting, reviewing, and maintaining RMF security documentation, including: System Security Plans (SSPs), Contingency Plans (ISCPs), Incident Response Plans (IRPs), Business Impact Analyses (BIAs), System Characterization Documents (SCDs), Configuration Management Plans (CMPs), Privacy Impact Analyses (PIAs), Plan of Action & Milestones (POA&Ms), Account Management Plans (AMPs), and Security Impact Analyses (SIAs)
• Create, track, and maintain POA&Ms for multiple information systems; work with stakeholders and ISSMs to ensure accurate documentation, remediation, and communication throughout the POA&M lifecycle
• Assist in conducting risk analysis of planned and installed information systems to identify vulnerabilities and threats; recommend mitigation actions
• Assist in conducting vulnerability scanning of information systems; compile compliance reports based on scan findings; validate scan accuracy and identify false positive results
• Assist in the development of security contingency plans, disaster recovery procedures, and delivery of incident response training
• Gather artifacts and support Continuous Monitoring Assessments, Security Assessments, and internal/external security audits
• Provide cybersecurity guidance to project teams and stakeholders through system development, configuration, and maintenance
• Prepare and present status reports on findings, POA&M progress, and RMF activities to management and stakeholders

SAIC is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.
We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.