
Description
Description
SAIC is seeking a Senior Information Systems Security Analyst to support a critical U.S. government agency in the National Capital Region. This senior-level role is focused on the development and maintenance of tailored NIST SP 800-53 Rev. 5 control implementation statements to support system authorizations (ATO), continuous monitoring, and broader compliance initiatives.
This is an excellent opportunity for a seasoned cybersecurity professional with hands-on experience in federal ATO processes, technical writing, and security architecture who is eager to contribute to the maturity of system security documentation and governance activities.
Responsibilities:
- Develop and maintain detailed, system-specific NIST SP 800-53 Rev. 5 control implementation statements for hybrid and cloud-based environments
- Collaborate with SMEs, system owners, engineers, and ISSOs to validate technical control implementations
- Translate technical configurations and operational practices into clear, compliant documentation aligned with RMF and assessment procedures
- Identify and document control inheritance opportunities and shared responsibilities across systems and environments
- Review and edit control narratives for accuracy, completeness, and consistency with assessment objectives
- Support ATO-related efforts, including system authorizations, re-authorizations, and continuous monitoring documentation
- Conduct gap analyses and readiness reviews to assess the completeness of control implementations
- Support audits, security assessments, and reviews by producing high-quality, well-documented control statements and evidence
- Document control deficiencies and support creation of POA&Ms for remediation planning
- Stay current with updates to federal guidance, including NIST 800-53, NIST 800-37, FedRAMP, RMF, and CMMC
- Assist in the development and revision of system security plans (SSPs), POA&Ms, and related documentation
- Support continuous security monitoring for control compliance and documentation accuracy
- Assist in the creation and update of security policies, procedures, and technical guidance
- Contribute to reports, briefings, schedules, and project plans in both written and oral formats
Qualifications
Requirements:
**This hybrid role requires a minimum of three on-site days per week in Washington, DC.**
- Bachelor's degree and 9+ years of IT security or IT controls experience in technical environments, or a Master's degree and 7+ years of experience (4 years experience in lieu of degree)
- Hands-on experience implementing and documenting security controls in system engineering, administration, or related technical roles
- Strong working knowledge of NIST SP 800-53, RMF, CSF, and federal ATO processes (FISMA, FedRAMP, CMMC)
- Experience supporting the development of SSPs, POA&Ms, SARs, and other RMF documentation
- Familiarity with hybrid IT environments and platforms such as Microsoft Office 365, Azure, Cisco, and Oracle
- Excellent technical writing skills with the ability to produce deliverables requiring minimal revisions
- Strong collaboration and communication skills, including the ability to convey complex technical content to diverse stakeholders
- Proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and SharePoint
Preferred Qualifications:
- One or more current certifications such as CISSP, CISM, CAP, CISA, or Security+
- Experience with cloud security principles and tools (AWS, Azure, GCP)
- Familiarity with GRC platforms such as Archer, eMASS, CSAM, or Xacta
- Understanding of OMB M-22-09, Executive Order 14028, and current federal cybersecurity policy landscape
- Working knowledge of network security principles (e.g., firewalls, IDS/IPS, VPNs, segmentation)
- Awareness of evolving threats and emerging IT security standards
Clearance Requirement:
- All candidates must be eligible to obtain and maintain a U.S. Public Trust clearance requiring U.S. Citizenship.
Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
Apply on company website