Spectrum San Diego

ATO ISSO

Sorry, this job was removed at 06:19 p.m. (UTC) on Wednesday, Oct 07, 2026

Be an Early Applicant

Hiring Remotely in HI, USA

Remote

Expert/Leader

Security

The Role

Documents security controls and develops ATO packages for on-premises and cloud systems supporting USPACOM. The role validates vulnerability and risk assessments, audits information systems, evaluates security-focused system designs, recommends vulnerability mitigations, reviews system enhancements, and supports RMF documentation. It requires extensive experience with NIST guidance, GRC tools, SSPs, STIGs, cloud security requirements, DoD system boundaries, and accreditation packages, along with an active Secret clearance and eligibility for TS/SCI.

Summary Generated by Built In

SAIC is seeking an ATO ISSO to support USPACOM documenting security controls and creating Authority to Operate (ATO) packages.

JOB DESCRIPTION:

Documenting security controls in SSP per NIST SP 800-53A rev4.
Create Authority to Operate (ATO) packages.
Validate vulnerability/risk assessment analysis to support accreditation.
Utilize various information system inspection tools to audit systems, analyze potential vulnerabilities and identify mitigation approaches.
Conduct technical evaluation of information system designs, focusing on information security aspects and accreditation.
Review completion and implementation of system additions and enhancements and make recommendations to management.
Determine system specifications, input/output processes, and working parameters for hardware and software compatibility.
Assist and review program documentation to include RMF reports, accreditation packages, and security policy guides using NIST 800-53A guidance.

Qualifications

REQUIRED EDUCATION AND EXPERIENCE:

Bachelors and fourteen (14)+ years of related experience; additional four (4) years of experience considered in lieu of degree.
Experience working with Authority to Operate (ATO) packages for both on-premises, and Cloud environments.
Experience using Government, Risk Compliance (GRC) tools (i.e. Cyber Security Assessment and Management (CSAM), eMASS, XACTA, etc.)
Experience developing Standard Operating Procedures (SOP), After-Action Reports, and Policy and Procedure documents.
Experience documenting security controls in a System Security Plan (SSP) and how the controls are being implemented.
Familiar with Risk Management Framework (RMF), Cloud Security Requirements Guide (SRG), National Institute of Standards and Technology (NIST) guides, and Security Technical Implementation Guide (STIG).
Understanding of the DOD requirements for Network Topology, System Security Boundary, and Data Flow Diagrams.

REQUIRED CERTIFICATION:

Must have a current DoD IAM Level I or higher certification (i.e. Security+ CE, Cloud+, CASP+, OR CISSP etc.)

REQUIRED CLEARANCE:

Must have a current Active Secret Clearance with the ability to obtain a TS/SCI Clearance.
Must be a current US Citizen.

About UsSAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

Skills Required

Bachelor’s degree and 14 or more years of related experience; four additional years of experience may substitute for the degree
Experience developing ATO packages for on-premises and cloud environments
Experience using GRC tools such as CSAM, eMASS, or XACTA
Experience developing SOPs, after-action reports, and policy and procedure documents
Experience documenting security controls and their implementation in an SSP
Familiarity with RMF, Cloud SRG, NIST guides, and STIGs
Understanding of DoD network topology, system security boundary, and data flow diagrams
Current DoD IAM Level I or higher certification, such as Security+ CE, Cloud+, CASP+, or CISSP
Current active Secret clearance with the ability to obtain TS/SCI clearance
Current United States citizenship