Cybersecurity Spec Team Mgr

SAIC•Reston, VA

14h•Onsite

About The Position

SAIC is seeking a highly motivated, detail-oriented, and experienced Information Systems Security Manager (ISSM) to join its lead systems integrator team in Reston, Virginia. The ISSM will oversee the cybersecurity posture and ensure compliance of classified information systems supporting the Department of the Air Force’s Integrated Fires Command and Control (DIFC2) Program. The role requires a strong technical background in information security and thorough knowledge of the certification and accreditation process in accordance with NIST 800-53 and the Risk Management Framework (RMF). The successful candidate will have excellent communication, organizational, and problem-solving skills and will continually balance and adjust priorities to meet short deadlines. This position is onsite in Reston, Virginia.

Requirements

U.S. citizenship.
IAT Level III certification, such as CASP+, CCNP Security, CISA, CISSP, or CCSP.
Familiarity with CI/CD pipelines; build tools such as NPM and Maven; software composition analysis tools such as SonarQube and Fortify; Docker image creation; and Kubernetes container deployments.
Ability to communicate effectively with multiple stakeholders.
Bachelor’s degree and 9 years of experience.
Active TS/SCI clearance or SCI eligibility.

Responsibilities

Develop, implement, and maintain security policies, procedures, and documentation to ensure compliance with DoW security standards and regulations.
Perform risk assessments, vulnerability assessments, and security audits; identify system vulnerabilities and provide remediation strategies.
Advise and assist the government customer in implementing government policy and recommend process tailoring.
Analyze and validate established security requirements and recommend additional security requirements and safeguards.
Facilitate the approval process for Authorization to Operate (ATO), Authority to Extend (ATE), Authorization to Connect (ATC), and Interconnection Security Agreement (ISA), working with the customer and stakeholders to obtain SCA/AO endorsement.
Evaluate and recommend new security tools, techniques, and technologies, and introduce them to the enterprise in alignment with IT security strategy.
Develop and maintain an organizational- or system-level cybersecurity program, including cybersecurity architecture, requirements, objectives and policies, personnel, processes, and procedures.
Maintain a repository of organizational- or system-level cybersecurity documentation.
Ensure cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
Read and interpret dataflow, network, and other developmental diagrams.
Write and utilize documentation.