Information System Analyst

SAIC•Springfield, VA

1d•Hybrid

About The Position

SAIC seeks a highly experienced Senior Information System Analyst / Security Officer to support the Department of State - Vanguard 2025 contract. This senior-level position provides full-service IT security support in a dynamic, fast-paced environment, working collaboratively with Government customers, contractor teams, and external stakeholders across all program security functions. This role is hybrid and will require onsite work in Springfield, VA and Beltsville, MD. SAIC® is a premier Fortune 500® mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, civilian and intelligence markets includes secure high-end solutions in mission IT, enterprise IT, engineering services and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives. We are approximately 24,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.5 billion. For more information, visit saic.com . For ongoing news, please visit our newsroom . SAIC accepts applications on an ongoing basis and there is no deadline.

Requirements

Bachelor's degree and nine (9) years or more of related experience; Master's degree and seven (7 years or more of related experience; may accept additional experience in lieu of degree.
Extensive experience developing and revising system-specific security safeguards and local operating procedures based on relevant guidelines and regulations.
Deep knowledge of NIST SP 800-37 (Risk Management Framework), NIST SP 800-53 (Security Controls), NIST SP 800-100 (Information Security. Handbook), NIST SP 800-137 (Continuous Monitoring), and FedRAMP requirements.
Proven ability to provide authoritative guidance to project teams on security guidelines and regulatory requirements.
Significant experience producing Information Security Documentation including Accreditation Packages and System Security Plans.
Demonstrated expertise developing and maintaining comprehensive documentation outlining system operating environments.
Strong track record producing security incident reports, equipment/software inventories, operating instructions, technical vulnerability reports, contingency plans, and related documentation.
Extensive experience coordinating and conducting system security audits to support compliance with System Security Plans.
Proven ability to maintain Authority to Operate (ATO) status through effective security management and continuous monitoring.
US Citizenship
Active secret clearance with the ability to obtain a top secret clearance.

Nice To Haves

Professional certifications such as CISSP, CISM, CAP, or similar.
Experience supporting Department of State or other federal agency IT security programs.
Knowledge of Department of State security policies and procedures.
Experience with security automation tools and continuous monitoring platforms.

Responsibilities

Security Operations & Compliance Collaborate with Network Design and Engineering (DE) and Cybersecurity Management (CSM) on System Owner support requirements.
Perform comprehensive vulnerability and risk assessment analysis to support accreditation and program protection activities.
Coordinate and conduct regular system security audits to ensure compliance with System Security Plans and maintain Authority to Operate (ATO) status.
Monitor and ensure adherence to NIST SP 800-37, NIST SP 800-53, NIST SP 800-100, NIST SP 800-137, and FedRAMP requirements.
Documentation & Accreditation Develop and maintain Information Security Documentation including Accreditation Packages and System Security Plans (SSPs).
Produce and maintain comprehensive documentation outlining system operating environments for assigned systems.
Prepare security incident reports, equipment/software inventories, operating instructions, technical vulnerability reports, and contingency plans.
Conduct pre-accreditation inspections and assist in preparation of accreditation documents.
Technical Security Integration Assist IT staff with architectural and engineering designs to incorporate appropriate security features and controls.
Develop and revise system-specific security safeguards and local operating procedures based on relevant guidelines and regulations.
Provide expert guidance to project teams on security requirements, guidelines, and regulatory compliance.
Support implementation of security controls across complex IT environments.
Collaboration & Stakeholder Engagement Work closely with Government customers, contractor teams, and external partners across all program security functions.
Serve as a trusted advisor on information security matters to technical and non-technical stakeholders.
Coordinate security activities across multiple teams and organizational boundaries.