Information Systems Security Specialist

Bigbear.ai•UNAVAILABLE, UNAVAILABLE

4d•Remote

About The Position

Ask Sage, a BigBear.ai company, is the leading Generative AI platform that augments the velocity of government and commercial teams with dozens of use cases, from coding to cybersecurity to acquisition to data analysis and beyond. Our secure platform delivers cutting-edge technology that enables teams to focus on strategic initiatives while we take care of the heavy lifting. We are seeking an Information Systems Security Specialist to help safeguard the information systems behind our revolutionary platform.

Requirements

5-8 years of combined work-related experience in IT, cybersecurity, or security authorization
IAM Level I certification
Bachelor's degree in Computer Science, Cybersecurity, or IT Engineering (four (4) additional years of related work experience may substitute for the degree)
Experience in several of the following areas: Knowledge of current security tools, Hardware/software security implementation, Communication protocols, Encryption tools and techniques
Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
Eligible to obtain and maintain a DoD Clearance.

Nice To Haves

Hands-on experience supporting FedRAMP High and/or DoD IL5 compliance efforts
Experience with continuous monitoring, System Security Plan (SSP) maintenance, and security authorization (ATO) processes
Familiarity with cloud-based SaaS environments and modern security operations.

Responsibilities

Support day-to-day security operations to maintain a strong operational security posture across the Ask Sage platform.
Develop, maintain, and update the System Security Plan (SSP) and other Cybersecurity documentation.
Support FedRAMP High and DoD IL5 compliance activities, including continuous monitoring and preparation for and participation in regular audits and assessments.
Conduct and support risk assessments to identify potential security and compliance issues, and help implement strategies to mitigate them.
Assist in the development, implementation, and enforcement of information security policies, standards, and procedures aligned with federal regulations and best practices.
Collaborate with cross-functional teams — including engineering, operations, and compliance — to ensure security requirements are integrated into all aspects of the platform.
Support security incident management activities, including detection, response, and documentation.
Track and help report on compliance metrics and remediation status to support senior stakeholders.