InfoSec Security Specialist (ISSO) – RMF/NIST Focus

SAIC; Oklahoma City (OK); On-site; USD 70,000 - 110,000; Full time

Job summary

SAIC in Oklahoma City seeks an Information System Security Officer (ISSO) to support government-contract security and RMF-based accreditation efforts. The role involves working under supervision to apply RMF controls, develop security documentation, and coordinate with stakeholders on POA&Ms and continuous monitoring.

The ideal candidate has hands-on RMF/NIST experience, vulnerability assessment familiarity (Nessus/Qualys), and strong communication to bridge technical and non-technical teams.

Qualifications

• Bachelor's degree in computer science, information systems, information technology, cybersecurity, or a related discipline.
• Minimum of three (3) years of combined IT experience, including information security or cybersecurity.
• Candidate must obtain a Public Trust Clearance prior to start date.
• Experience with RMF, NIST SP 800-30/37/40/53, and risk-based assessments.

Responsibilities

• Apply basic technical knowledge in support of system certifications, accreditations, and information security tasks under close supervision.
• Assist in developing RMF documentation including SSPs, ISCPs, IRPs, BIAs, SCDs, CMPs, PIAs, POA&Ms, AMPs, SIAs.
• Create and maintain POA&Ms for multiple systems with stakeholders to ensure remediation.
• Assist in risk analysis to identify vulnerabilities and threats; recommend mitigations.
• Assist in vulnerability scanning and reporting, validating findings and false positives.
• Contribute to security contingency plans, disaster recovery procedures, and incident response training.
• Gather artifacts for Continuous Monitoring, RMF assessments, and audits.
• Provide cybersecurity guidance to project teams throughout development and maintenance.
• Prepare status reports on findings and RMF activities for management.

Skills

RMF expertise

NIST SP 800-53

Vulnerability scanning

Documentation

Communication

POA&M management

Education

Bachelor's degree in computer science, information systems, IT, cybersecurity, or related

Tools

Linux

Windows

UNIX

Solaris

Oracle

SQL

MySQL

Nessus

Qualys

Job description

SAIC in Oklahoma City seeks an Information System Security Officer (ISSO) to support government-contract security and RMF-based accreditation efforts. The role involves working under supervision to apply RMF controls, develop security documentation, and coordinate with stakeholders on POA&Ms and continuous monitoring.

The ideal candidate has hands-on RMF/NIST experience, vulnerability assessment familiarity (Nessus/Qualys), and strong communication to bridge technical and non-technical teams.