Bachelor's degree with 9+ years or Master's with 7+ years of experience; PhD/JD with 4+ years.
Proven experience in securing multi-classification cloud environments.
Hands-on experience with STIG review/hardening and validating ACAS/Nessus outputs.
Experience maintaining RMF/ATO artifacts including SSP and POA&M.
Familiarity with Jira/Xacta for RMF and vulnerability tracking.
DoD 8140 aligned certifications such as CISSP, CCSP, or CASP+.
Responsibilities
Build and secure multi-tenant cloud environments.
Implement JSIG, NIST SP 800-53, STIG, and MLS/MILS baselines across cloud enclaves.
Own RMF/ATO packages, producing SSP, POA&M, and full RMF evidence.
Validate STIG, ACAS/Nessus, SAST/DAST outputs before environment promotion.
Perform functional validation of cyber artifacts and coordinate evidence delivery.
Maintain continuous monitoring with audit logs and security metrics.
Support early design efforts for Cloud + DSOP integration.
Benefits
Flexible work environment with ongoing application acceptance.
Opportunities for professional development and certifications.
Collaborative team culture with cross-functional partnerships.
Full Job Description
Job Description
Description
The Cybersecurity Engineer (Cloud) secures and accredits multi tenant cloud environments (Dev, Integration, Test). The role implements JSIG/NIST/STIG baselines, engineers secure multi classification cloud designs, validates Capability Provider and External cyber artifacts, and ensures all required evidence is provided to the Infrastructure TO for Baseline updates. The Cybersecurity Engineer (Cloud) develops RMF/ATO packages for cloud environments, partners closely with DSOP, Platform, CE, and Cloud SMEs, and contributes hands on effort to early DSOP/cloud design and environment build out.
Job Duties Include:
Build and secure multi-tenant cloud environments.
Implement JSIG, NIST SP 800-53, STIG, and MLS/MILS baselines across Dev/Integration/Test cloud enclaves.
Own RMF/ATO packages for cloud environments, producing SSP, POA&M, and full RMF evidence.
Validate STIG, ACAS/Nessus, SAST/DAST, and container-security outputs prior to environment promotion.
Perform functional validation of CP/External cyber artifacts; coordinate delivery of validated evidence to Infrastructure TO.
Maintain cloud-aligned continuous monitoring, including audit logs, cloud telemetry, and Prometheus/Grafana security metrics.
Support Cloud + DSOP joint early design efforts; collaborate to integrate pipeline-aware cloud security.
Validate IaC/CaC baselines (Terraform, Ansible, Helm) for secure, consistent cloud deployments and promotion gates.
Provide cyber recommendations during CCB promotion evaluations.
Offer WHY-based guidance and vector checks to Capability Providers and team members.
Qualifications
Required Qualifications & Experience:
Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience ; PhD or JD and four (4) years or more experience.
Proven experience securing multi classification cloud environments.
Hands on experience performing STIG review/hardening, validating ACAS/Nessus outputs, and adjudicating SAST/DAST results.
Familiarity with Zero Trust architecture, container hardening, and cloud security automation platforms.
Strong documentation and communication skills aligned with RMF evidence and CMCC governance.
Target salary range: $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
Overview
SAIC accepts applications on an ongoing basis and there is no deadline.
About SAIC
Science Applications International Corporation (SAIC) is a technology integrator in the technical, engineering, intelligence, and enterprise information technology markets. SAIC has approximately 26,000 employees and operates in more than 70 countries. The company was founded in 1969 and is headquartered in Reston, Virginia. SAIC provides services to the U.S. government, including the Department of Defense, the intelligence community, and civilian agencies. The company also serves commercial customers in the healthcare, energy, and financial services sectors.
