[Hiring] Information Systems Security Specialist @Bigbear.ai

Role Description

We are seeking an Information Systems Security Specialist to help safeguard the information systems behind our revolutionary platform.

Key Responsibilities:

• Support day-to-day security operations to maintain a strong operational security posture across the Ask Sage platform.
• Develop, maintain, and update the System Security Plan (SSP) and other Cybersecurity documentation.
• Support FedRAMP High and DoD IL5 compliance activities, including continuous monitoring and preparation for and participation in regular audits and assessments.
• Conduct and support risk assessments to identify potential security and compliance issues, and help implement strategies to mitigate them.
• Assist in the development, implementation, and enforcement of information security policies, standards, and procedures aligned with federal regulations and best practices.
• Collaborate with cross-functional teams — including engineering, operations, and compliance — to ensure security requirements are integrated into all aspects of the platform.
• Support security incident management activities, including detection, response, and documentation.
• Track and help report on compliance metrics and remediation status to support senior stakeholders.

Qualifications

• 5-8 years of combined work-related experience in IT, cybersecurity, or security authorization.
• IAM Level I certification.
• Bachelor's degree in Computer Science, Cybersecurity, or IT Engineering (four (4) additional years of related work experience may substitute for the degree).
• Experience in several of the following areas:
• Knowledge of current security tools.
• Hardware/software security implementation.
• Communication protocols.
• Encryption tools and techniques.
• Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services.
• Eligible to obtain and maintain a DoD Clearance.

Requirements

• Hands-on experience supporting FedRAMP High and/or DoD IL5 compliance efforts.
• Experience with continuous monitoring, System Security Plan (SSP) maintenance, and security authorization (ATO) processes.
• Familiarity with cloud-based SaaS environments and modern security operations.

Benefits

• Please note the targeted compensation range is provided as an estimate, and any actual compensation offer may vary depending on the needs of the company, or an applicant's skillset, competencies, experience, education, certifications, location, or other factors.
• The estimated range does not include the value of any benefits offered.