Information Systems Security Officer

Summary

SAIC is seeking a motivated and skilled Information Systems Security Officer (ISSO) to support cybersecurity and compliance activities for mission-critical IT systems on the MAJESTIC Joint Program Office (JPO) Team. In this role, the ISSO will be responsible for implementing, managing, and assessing system security controls to ensure compliance with government regulations, standards, and best practices.

Responsibilities

• Ensure compliance with Risk Management Framework (RMF) requirements by developing, maintaining, and assessing system security artifacts, including System Security Plans (SSPs), POA&Ms, and applicable policies and procedures
• Implement and validate security controls in alignment with NIST 800-53, associated overlays, and system-specific requirements
• Support the Accreditation and Authorization (A&A) process, including preparing documentation and achieving and maintaining system Authority to Operate (ATO) status
• Conduct risk assessments and vulnerability analysis, identify potential threats and weaknesses, and provide recommendations for mitigation
• Work with IT teams to implement system hardening for platforms, applications, and networks in compliance with DISA STIGs and cybersecurity best practices
• Perform continuous monitoring of systems using tools such as Splunk, ACAS, or SolarWinds, ensuring real-time threat detection, event notifications, and security compliance validation
• Collaborate with cross-functional teams, including system administrators, developers, and ISSMs, to address security risks, system vulnerabilities, and security incidents
• Support incident response activities by conducting forensic analysis, generating reports, and coordinating efforts to remediate and recover from security events
• Provide cybersecurity awareness training for users and team members to ensure adherence to organizational security requirements and best practices
• Prepare and deliver security status updates, risk reports, and briefings to senior stakeholders and leadership
• Develop and maintain system documentation, including security control implementation descriptions, policies, and SOPs

Skills

• Bachelor's Degree
• Candidates must satisfy Cybersecurity Workforce Framework (CWF) ID 722 (Information Systems Security Manger (ISSM) – Intermediate Level) requirements, as outlined by Navy COOL
• 2-5 years of professional experience managing and supporting enterprise-level IT environments
• Deep understanding of security frameworks, including NIST 800-53, RMF, and/or DoD 8510.01
• Experience developing and maintaining System Security Plans (SSPs) and managing POA&Ms for compliance and audit purposes
• Proficiency with vulnerability scanning tools and security analysis platforms, such as Nessus, ACAS, or Qualys
• Knowledge of security controls implementation and system hardening using DISA STIGs or CIS Benchmarks for platforms and network-enabled devices
• Familiarity with monitoring tools such as Splunk, SolarWinds, or other SIEM solutions for proactive security monitoring and incident management
• Strong understanding of Windows Server and Active Directory security, including account policy configurations and group policy enforcement
• Basic knowledge of Red Hat Enterprise Linux (RHEL) for security configurations and patching
• General understanding of networking concepts, security configurations, and protocols (e.g., TCP/IP, VLANs, IPsec, firewalls)
• Ability to conduct risk assessments, analyze vulnerabilities, and make actionable recommendations to remediate threats
• Strong analytical and technical writing skills for maintaining security documentation, incident reports, and audit artifacts
• Active TS/SCI clearance with the ability to obtain and maintain a TS/SCI with Poly
• Certified Information Systems Security Professional (CISSP) or equivalent advanced certifications
• Knowledge of continuous monitoring tools and automated compliance tracking systems
• Familiarity with encryption standards, PKI infrastructures, and secure key management practices
• Hands-on experience with virtualized environments and hyper-converged platforms, such as VMware or Nutanix
• Familiarity with ITIL v4 frameworks for managing IT operations and processes

Qualifications

Must Haves

• Bachelor's Degree
• Candidates must satisfy Cybersecurity Workforce Framework (CWF) ID 722 (Information Systems Security Manger (ISSM) – Intermediate Level) requirements, as outlined by Navy COOL
• 2-5 years of professional experience managing and supporting enterprise-level IT environments
• Deep understanding of security frameworks, including NIST 800-53, RMF, and/or DoD 8510.01
• Experience developing and maintaining System Security Plans (SSPs) and managing POA&Ms for compliance and audit purposes
• Proficiency with vulnerability scanning tools and security analysis platforms, such as Nessus, ACAS, or Qualys
• Knowledge of security controls implementation and system hardening using DISA STIGs or CIS Benchmarks for platforms and network-enabled devices
• Familiarity with monitoring tools such as Splunk, SolarWinds, or other SIEM solutions for proactive security monitoring and incident management
• Strong understanding of Windows Server and Active Directory security, including account policy configurations and group policy enforcement
• Basic knowledge of Red Hat Enterprise Linux (RHEL) for security configurations and patching
• General understanding of networking concepts, security configurations, and protocols (e.g., TCP/IP, VLANs, IPsec, firewalls)
• Ability to conduct risk assessments, analyze vulnerabilities, and make actionable recommendations to remediate threats
• Strong analytical and technical writing skills for maintaining security documentation, incident reports, and audit artifacts
• Active TS/SCI clearance with the ability to obtain and maintain a TS/SCI with Poly

Nice to Haves

• Certified Information Systems Security Professional (CISSP) or equivalent advanced certifications
• Knowledge of continuous monitoring tools and automated compliance tracking systems
• Familiarity with encryption standards, PKI infrastructures, and secure key management practices
• Hands-on experience with virtualized environments and hyper-converged platforms, such as VMware or Nutanix
• Familiarity with ITIL v4 frameworks for managing IT operations and processes

Benefits

• Competitive salary aligned to market rates and role-specific requirements