Description
This is senior-level Cybersecurity Specialist position supporting a US government agency in Springfield, VA. The preferred candidate must possess a strong understanding of the Federal Information Security Modernization Act (FISMA), the NIST Risk Management Framework (RMF), and the security requirements and artifacts necessary to attain an Authorization to Operate (ATO) for enterprise systems.
This position provides a hybrid telework environment with a required minimum of one day per week onsite presence at a secure government facility in Springfield, VA. Occasional onsite work may also be required at the agency's Washington, DC locations. Work location and schedule are subject to change based on government requirements.
Responsibilities include:
Establish program control processes to mitigate risks and attain assessment and authorization (A&A) of systems.
Engage system stakeholders during the A&A process to document security control implementations, gather supporting artifacts, and draft security documentation.
Prepare and compile artifacts in response to FISMA reporting requirements.
Maintains all ATO related documents and artifacts.
In coordination with the system teams, identify remediation actions necessary to address POA&M identified vulnerabilities.
Maintains and tracks progress on closing POA&Ms.
Qualifications
Required Education & Experience:
Bachelor's degree in computer science or related field and 5 years' experience; Master's degree and 3 years; may accept additional experience in lieu of degree.
An expert understanding of the NIST Risk Management Framework (RMF), FISMA, and the Assessment and Authorization (A&A) process.
Demonstrated experience with compliance tools such as Xacta and Archangel.
Knowledgeable in the security of various endpoint devices/platforms such as mobile phone devices (Android, iPhone, etc.), mobile devices running Windows 11, server operating systems, and Citrix thin clients.
Experience implementing security measures within information system engineering projects.
Ability to document and explain complex security processes in a jargon free layperson's terminology.
Interpersonal skills including the ability to collaborate effectively and excellent written and oral communications.
Must have strong problem-solving and analytical skills.
One or more current security certifications (e.g., CISSP CISM, Security +).
Required Clearance:
US Citizenship.
Active Top Secret security clearance.
Desired Education/Skills:
Past experience supporting a U.S. Government agency's A&A process
Technical familiarity with Microsoft O365, Azure, Windows 10/11 desktops
SAIC accepts applications on an ongoing basis and there is no deadline.
Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site. REQNUMBER: 2411980
SAIC is a premier technology integrator, solving our nation's most complex modernization and systems engineering challenges across the defense, space, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration; enterprise IT, including cloud services; cyber; software; advanced analytics and simulation; and training. We are a team of 23,000 strong driven by mission, united purpose, and inspired by opportunity. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $6.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see Working at SAIC. EOE AA M/F/Vet/Disability