> Markdown version of [/jobs/ext/1926236-it-security-administrator](https://www.wearedevelopers.com/jobs/ext/1926236-it-security-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Administrator - **Company:** Science Applications International Corporation - **Location:** Oklahoma City, OK, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Unix, Configuration Management, Cyber Security, Information Systems, Databases, Linux, Disaster Recovery, Information Security Management, Microsoft Office, MySQL, Oracle (Applications), Systems Development Life Cycle, Server Virtualization, Solaris (Operating System), SQL Databases, Software Vulnerability Management, Information Technology, Nessus, Qualys, Plan of Action and Milestones, Vulnerability Analysis - **Published:** August 5, 2026 - **Apply:** https://www.dice.com/job-detail/aef609b5-0c21-452e-b2f6-aece6a496ac9 ## About the Role * Bachelor's degree in computer science, Information Systems, Information Technology, Cybersecurity, or a related discipline * 4 years of experience may replace a completed bachelors degree * Candidates must obtain a Public Trust Clearance prior to start date. * Minimum of three (3) years of combined IT experience, including at least one of the following: + a. Installing, maintaining, or managing IT network devices, physical/virtual servers, or operating system/database platforms (e.g., Linux, Windows, UNIX, Solaris, Oracle, SQL, MySQL); + b. Supporting information systems as an Information Security or Cybersecurity professionals The following competencies are considered critical to successful day-to-day performance in this role. * Working knowledge of NIST SP 800-30, 800-37, 800-40, and 800-53, and/or other RMF frameworks * Familiarity with common vulnerability scoring systems (e.g., CVSS) and vulnerability scanning tools (e.g., Nessus, Qualys) * Ability to differentiate between software flaws and misconfiguration issues * Strong written and verbal communication skills; ability to work effectively across technical and non-technical teams * Strong attention to detail with excellent organizational and documentation skills The following credentials and experience are not required but will strengthen a candidate's application and contribute to immediate productivity in the role: * One or more certifications: Security+, SSCP, CAP/CGRC, CISA, CISSP, or GSEC * Experience with RMF system lifecycle documentation and implementation * Experience with cybersecurity or information system tracking tools * Knowledge of configuration management and change control processes * Proficiency with Microsoft Office Suite ## Description SAIC has an immediate opening for a highly motivated Information System Security Officer (ISSO), classified as the IT Security Specialist, Level I level, supporting the security and compliance of information systems under a government contract. Under close direction of a manager, team leader, or more experienced specialist, the incumbent will apply basic technical knowledge in the performance of system certifications/accreditations and information security-related tasks. The ideal candidate has experience with NIST and RMF frameworks, security compliance, continuous monitoring, and vulnerability management. Key Responsibilities * Apply basic technical knowledge in support of system certifications, accreditations, and information security tasks under close supervision of senior staff * Assist in developing, documenting, reviewing, and maintaining RMF security documentation, including: System Security Plans (SSPs), Contingency Plans (ISCPs), Incident Response Plans (IRPs), Business Impact Analyses (BIAs), System Characterization Documents (SCDs), Configuration Management Plans (CMPs), Privacy Impact Analyses (PIAs), Plan of Action & Milestones (POA&Ms), Account Management Plans (AMPs), and Security Impact Analyses (SIAs) * Create, track, and maintain POA&Ms for multiple information systems; work with stakeholders and ISSMs to ensure accurate documentation, remediation, and communication throughout the POA&M lifecycle * Assist in conducting risk analysis of planned and installed information systems to identify vulnerabilities and threats; recommend mitigation actions * Assist in conducting vulnerability scanning of information systems; compile compliance reports based on scan findings; validate scan accuracy and identify false positive results * Assist in the development of security contingency plans, disaster recovery procedures, and delivery of incident response training * Gather artifacts and support Continuous Monitoring Assessments, Security Assessments, and internal/external security audits * Provide cybersecurity guidance to project teams and stakeholders through system development, configuration, and maintenance * Prepare and present status reports on findings, POA&M progress, and RMF activities to management and stakeholders ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Coding for Good: Achieving social change with an app](https://www.wearedevelopers.com/videos/1645-coding-for-good-achieving-social-change-with-an-app) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)