Information Technology Security Specialist

SAIC • Oklahoma City, OK

1d

About The Position

SAIC is hiring an Information System Security Officer (ISSO), classified as an IT Security Specialist, Level I, to support the security and compliance of information systems under a government contract. Under close direction from a manager, team leader, or more experienced specialist, the role applies basic technical knowledge to system certifications and accreditations and other information security tasks. The position focuses on NIST and RMF frameworks, security compliance, continuous monitoring, and vulnerability management.

Requirements

• Bachelor's degree in computer science, Information Systems, Information Technology, Cybersecurity, or a related discipline; four years of experience may replace a completed bachelor's degree.
• At least three years of combined IT experience, including experience installing, maintaining, or managing IT network devices, physical or virtual servers, or operating system/database platforms, or supporting information systems as an information security or cybersecurity professional.
• Must obtain a Public Trust Clearance before the start date.
• Working knowledge of NIST SP 800-30, 800-37, 800-40, and 800-53, and/or other RMF frameworks.
• Familiarity with common vulnerability scoring systems such as CVSS and vulnerability scanning tools such as Nessus or Qualys.
• Ability to differentiate between software flaws and misconfiguration issues.
• Strong written and verbal communication skills and ability to work effectively across technical and non-technical teams.
• Strong attention to detail and excellent organizational and documentation skills.

Nice To Haves

• One or more certifications: Security+, SSCP, CAP/CGRC, CISA, CISSP, or GSEC.
• Experience with RMF system lifecycle documentation and implementation.
• Experience with cybersecurity or information system tracking tools.
• Knowledge of configuration management and change control processes.
• Proficiency with Microsoft Office Suite.

Responsibilities

• Apply basic technical knowledge in support of system certifications, accreditations, and information security tasks under close supervision of senior staff.
• Assist in developing, documenting, reviewing, and maintaining RMF security documentation, including System Security Plans (SSPs), Contingency Plans (ISCPs), Incident Response Plans (IRPs), Business Impact Analyses (BIAs), System Characterization Documents (SCDs), Configuration Management Plans (CMPs), Privacy Impact Analyses (PIAs), Plans of Action and Milestones (POA&Ms), Account Management Plans (AMPs), and Security Impact Analyses (SIAs).
• Create, track, and maintain POA&Ms for multiple information systems and work with stakeholders and ISSMs on documentation, remediation, and communication throughout the POA&M lifecycle.
• Assist in risk analysis of planned and installed information systems to identify vulnerabilities and threats and recommend mitigation actions.
• Assist with vulnerability scanning; compile compliance reports from scan findings, validate scan accuracy, and identify false positives.
• Assist in developing security contingency plans and disaster recovery procedures, and deliver incident response training.
• Gather artifacts and support Continuous Monitoring Assessments, Security Assessments, and internal and external security audits.
• Provide cybersecurity guidance to project teams and stakeholders during system development, configuration, and maintenance.
• Prepare and present status reports on findings, POA&M progress, and RMF activities to management and stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level