IT Security Administrator

SAIC is seeking an IT Security Administrator to work side by side with the government customer at the Naval Undersea Warfare Center in Newport, RI. The ideal candidate will join a small team responsible for assessing gaps in cybersecurity posture and developing and implementing recommendations to remediate identified risks.

This position is designed for a security administrator who is interested in expanding into Risk Management Framework (RMF) and Governance, Risk, and Compliance (GRC) work. The selected candidate will perform hands-on system administration and cybersecurity support while receiving experience and mentorship in RMF processes, cybersecurity compliance, assessment support, and authorization package development.

Perform continuous security risk assessments and support compliance automation activities

Perform daily system administration tasks for customers

Identify, remediate, and document operating system vulnerabilities

Support RMF activities, including gathering and organizing security-control implementation evidence and maintaining supporting compliance documentation

Assist with development and maintenance of RMF artifacts, such as System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security assessment materials, and authorization package inputs

Support vulnerability remediation tracking, risk documentation, and coordination with system owners, security personnel, and technical teams

Learn and apply DoD cybersecurity governance, RMF processes, and GRC practices under the mentorship of senior team members

EDUCATION AND EXPERIENCE

• Bachelor’s degree in a STEM field with no prior experience required, two+ years preferred or four years of relevant experience in lieu of a degree
• Hands-on experience with operating system security in Windows and/or Linux environments and endpoint protection solutions
• Experience conducting or supporting security assessments, vulnerability identification, system hardening, or remediation activities
• Familiarity with security technologies such as firewalls, intrusion detection and prevention systems, endpoint security tools, and vulnerability assessment tools
• Basic understanding of cybersecurity principles, risk management, and security compliance requirements
• Familiarity with cloud environments and security concepts, such as AWS, Microsoft Azure, or DoD cloud platforms; experience supporting cloud security configurations, identity and access management, or compliance activities is a plus
• Ability to collect, organize, and clearly communicate technical information and security documentation
• Excellent written and verbal communication skills
• Ability to work independently and effectively in a team environment

Desired

• Familiarity with NIST RMF concepts, security controls, authorization processes, or continuous monitoring
• Exposure to RMF artifacts, including SSPs, POA&Ms, security assessment reports, control implementation statements, or vulnerability remediation plans
• Familiarity with DoD cybersecurity compliance tools and workflows, such as eMASS or similar GRC platforms
• Experience supporting Authority to Operate (ATO) package development or cybersecurity assessment activities

CLEARANCE REQUIREMENT

U.S. citizenship

Active DoW Secret clearance or higher

CERTIFICATION REQUIREMENT

DoD 8570 IAT Level II certification required, such as CompTIA Security+ or equivalent.