Bachelor's degree with 9+ years or Master's with 7+ years of experience in cybersecurity; PhD/JD with 4+ years.
Minimum 9 years of hands-on cybersecurity experience.
Strong knowledge of DoD/Federal cybersecurity policies and guidance.
Proficient in RMF processes and documentation.
Experience in developing and maintaining ATO packages.
Skilled in creating and managing POA&Ms.
Familiarity with Azure security tools and at least one enterprise SIEM.
Responsibilities
Lead RMF activities from categorization to continuous monitoring.
Develop and maintain ATO packages, including SSPs and SARs.
Manage and track POA&Ms for timely remediation of findings.
Configure and monitor security alerts using Azure tools and other platforms.
Analyze security events and recommend mitigation strategies.
Apply DoD/Federal cybersecurity policies to operational projects.
Support continuous monitoring and periodic security assessments.
Collaborate with cross-functional teams to integrate security into system design.
Document processes and support audits and inspections.
Benefits
Onsite work at the Mark Center in Alexandria, VA, Monday-Friday.
Opportunity to work with cutting-edge cloud security technologies.
Engagement in a collaborative, cross-functional team environment.
Support for professional development in cybersecurity and cloud expertise.
Full Job Description
Job Description
SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD/Federal systems.
This position will be onsite at the Mark Center in Alexandria, Virginia.
The ideal candidate has strong RMF and ATO experience, is comfortable with cloud environments, and can work hands-on with security monitoring tools (including Azure security services and other enterprise monitoring platforms).
Key Responsibilities:
Lead and support Risk Management Framework (RMF) activities across all steps (categorization through continuous monitoring).
Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
Create, track, and manage Plan of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
Configure, interpret, and monitor security alerts and dashboards using Azure security tools (e.g., Microsoft Defender for Cloud, Sentinel) and other monitoring solutions (e.g., SIEM, vulnerability scanners, endpoint protection).
Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
Support continuous monitoring activities and periodic security assessments.
Collaborate with cross-functional teams (network, cloud, applications, operations) to integrate security into system design and ongoing operations.
Document processes, maintain evidence, and support internal and external audits/inspections.
Qualifications
Required Education:
Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more related experience
Required Qualifications
Minimum 9 years of hands-on cybersecurity experience.
Strong knowledge and practical experience with:
DoD/Federal cybersecurity policy and guidance.
RMF processes, documentation, and control implementation.
ATO package development and sustainment.
POA&M creation, management, and closure.
Experience with security monitoring tools, including:
Azure security tools (e.g., Microsoft Defender, Sentinel, or similar).
At least one enterprise SIEM and one vulnerability management tool.
Understanding of cloud architectures (Azure, AWS, or similar) and willingness to deepen cloud security expertise.
Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday-Friday.
Clearance:
Active DoD Secret security clearance.
About SAIC
Science Applications International Corporation (SAIC) is a technology integrator in the technical, engineering, intelligence, and enterprise information technology markets. SAIC has approximately 26,000 employees and operates in more than 70 countries. The company was founded in 1969 and is headquartered in Reston, Virginia. SAIC provides services to the U.S. government, including the Department of Defense, the intelligence community, and civilian agencies. The company also serves commercial customers in the healthcare, energy, and financial services sectors.
