ISSO - RMF/NIST Security Specialist (Entry Level)

SAIC; Oklahoma City (OK); On-site; USD 40,000 - 80,000; Full time

Job summary

SAIC is seeking an Information System Security Officer (ISSO) to support government contract information systems. The role focuses on RMF-based certifications, continuous monitoring, and vulnerability management under supervision.

The ideal candidate will have NIST RMF experience, strong documentation skills, and the ability to communicate effectively with technical and non-technical teams. Responsibilities include maintaining RMF artifacts, coordinating POA&M lifecycles, and supporting incident

Qualifications

• Bachelor's degree in CS/IS/IT/Cybersecurity or related field.
• 4 years of experience may substitute for degree.
• Public Trust Clearance required to start.
• 3+ years combined IT experience with security focus.

Responsibilities

• Apply basic technical knowledge in support of system certifications, accreditations, and information security tasks under close supervision of senior staff.
• Assist in developing, documenting, reviewing, and maintaining RMF security documentation (SSPs, ISCPs, IRPs, BIAs, SCDs, CMPs, PIAs, POA&Ms, AMPs, SIAs).
• Create, track, and maintain POA&M for multiple information systems; coordinate with ISSMs for remediation and communication.
• Assist in risk analysis of planned and installed information systems to identify vulnerabilities and threats; recommend mitigations.
• Assist in vulnerability scanning of information systems; compile compliance reports from findings and validate results.
• Assist in developing security contingency plans, disaster recovery procedures, and incident response training.
• Gather artifacts to support Continuous Monitoring Assessments and audits.
• Provide cybersecurity guidance to project teams through system development and maintenance.
• Prepare status reports on findings, POA&M progress, and RMF activities.

Skills

NIST RMF knowledge

Vulnerability scanning

Documentation skills

Communication skills

Education

Bachelor's degree in CS/IS/IT/Cybersecurity

Tools

Nessus

Qualys

Job description

SAIC is seeking an Information System Security Officer (ISSO) to support government contract information systems. The role focuses on RMF-based certifications, continuous monitoring, and vulnerability management under supervision.

The ideal candidate will have NIST RMF experience, strong documentation skills, and the ability to communicate effectively with technical and non-technical teams. Responsibilities include maintaining RMF artifacts, coordinating POA&M lifecycles, and supporting incident