The Role
Leads RMF and authorization activities for DoD and federal systems, including ATO package development, SSP and SAR maintenance, POA&M management, continuous monitoring, vulnerability analysis, and security assessment support. Configures Azure security and enterprise monitoring tools, coordinates remediation with technical teams, applies federal cybersecurity policies, documents security evidence, and supports audits. This is an onsite role at the Mark Center in Alexandria, Virginia, requiring an active DoD Secret clearance.
Summary Generated by Built In
SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD/Federal systems.
This position will be onsite at the Mark Center in Alexandria, Virginia.
The ideal candidate has strong RMF and ATO experience, is comfortable with cloud environments, and can work hands-on with security monitoring tools (including Azure security services and other enterprise monitoring platforms).
Key Responsibilities:
- Lead and support Risk Management Framework (RMF) activities across all steps (categorization through continuous monitoring).
- Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
- Create, track, and manage Plan of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
- Configure, interpret, and monitor security alerts and dashboards using Azure security tools (e.g., Microsoft Defender for Cloud, Sentinel) and other monitoring solutions (e.g., SIEM, vulnerability scanners, endpoint protection).
- Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
- Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
- Support continuous monitoring activities and periodic security assessments.
- Collaborate with cross-functional teams (network, cloud, applications, operations) to integrate security into system design and ongoing operations.
- Document processes, maintain evidence, and support internal and external audits/inspections.
Required Education:
- Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more related experience
Required Qualifications
- Minimum 9 years of hands-on cybersecurity experience.
- Strong knowledge and practical experience with:
- DoD/Federal cybersecurity policy and guidance.
- RMF processes, documentation, and control implementation.
- ATO package development and sustainment.
- POA&M creation, management, and closure.
- Experience with security monitoring tools, including:
- Azure security tools (e.g., Microsoft Defender, Sentinel, or similar).
- At least one enterprise SIEM and one vulnerability management tool.
- Understanding of cloud architectures (Azure, AWS, or similar) and willingness to deepen cloud security expertise.
- Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
- Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.
Clearance:
- Active DoD Secret security clearance.
We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.
Skills Required
- Bachelor's degree and at least 9 years of experience, or master's degree and at least 7 years, or PhD/JD and at least 4 years of related experience
- At least 9 years of hands-on cybersecurity experience
- Knowledge and practical experience with DoD and federal cybersecurity policy and guidance
- Experience with Risk Management Framework processes, documentation, and control implementation
- Experience developing and sustaining authorization packages
- Experience creating, managing, and closing Plans of Action and Milestones
- Experience with Azure security tools such as Microsoft Defender or Sentinel
- Experience with at least one enterprise SIEM and one vulnerability management tool
- Understanding of cloud architectures such as Azure or AWS
- Strong written and verbal communication skills for documenting security posture and presenting findings
- Ability and willingness to work onsite Monday through Friday at the Mark Center in Alexandria, Virginia
- Active DoD Secret security clearance
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Spectrum San Diego is a high tech security innovator, specializing in ultra-low-dose X-ray screening systems.
