RMF Security & Vulnerability Analyst

Saic; Oklahoma City (OK); On-site; USD 70,000 - 95,000; Full time

Job summary

SAIC is seeking an Information System Security Officer (ISSO), Level I, to support government-contract information systems. You will apply RMF and NIST-based controls, develop and maintain security documentation, and assist in risk assessments and vulnerability management.

The role emphasizes collaboration with stakeholders, issuance of POA&Ms, and ongoing monitoring activities to ensure compliance and readiness for audits.

Qualifications

• Bachelor's degree in computer science, information systems, information technology, cybersecurity, or a related discipline.
• 4 years of experience may replace a completed bachelor's degree.
• Candidate must obtain a Public Trust Clearance prior to start date.
• Minimum of three years of IT experience, including network devices, servers, or OS/databases, or information security/cybersecurity roles.

Responsibilities

• Apply basic technical knowledge in support of system Certifications, accreditations, and information security tasks under supervision.
• Develop, document, review, and maintain RMF documentation (SSPs, ISCPs, IRPs, BIAs, SCDs, CMPs, PIAs, POA&Ms, AMPs, SIAs).
• Create and track POA&Ms for multiple information systems with stakeholders and ISSMs.
• Conduct risk analysis to identify vulnerabilities and threats; recommend mitigations.
• Perform vulnerability scanning and compile compliance reports; validate findings and identify false positives.
• Develop security contingency plans, disaster recovery procedures, and provide incident response training.
• Gather artifacts and support Continuous Monitoring Assessments and security audits.
• Provide cybersecurity guidance to project teams through system development and maintenance.
• Present status reports on findings and RMF activities to management.

Skills

NIST RMF

Vulnerability scanning

Documentation

Cybersecurity guidance

Education

Bachelor's degree in Computer Science or IT

Tools

Nessus

Qualys

Job description

SAIC is seeking an Information System Security Officer (ISSO), Level I, to support government-contract information systems. You will apply RMF and NIST-based controls, develop and maintain security documentation, and assist in risk assessments and vulnerability management.

The role emphasizes collaboration with stakeholders, issuance of POA&Ms, and ongoing monitoring activities to ensure compliance and readiness for audits.