Cybersecurity Engineer - Cloud

Science Applications International Corp.; Chantilly (VA); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC is a trusted leader delivering advanced command and control capabilities across the Department of the Air Force. This role focuses on accelerating integration, testing, security, and transition of new cloud-enabled capabilities into operations, collaborating with operators, engineers, and government teams to ensure mission readiness.

You will build and secure multi-tenant cloud environments, implement baseline security controls, own RMF/ATO packages, validate security outputs, and

Qualifications

• Bachelor’s with 9+ yrs; Master’s with 7+; PhD/JD with 4+ yrs experience.
• Proven experience securing multi‑classification cloud environments.
• Hands-on STIG review, ACAS/Nessus, SAST/DAST validation.
• Experience maintaining RMF/ATO artifacts (SSP, POA&M, monitoring).
• Familiar with Jira/Xacta workflows for RMF and vulnerability tracking.
• DoD 8140 aligned certs: CISSP, CCSP, CASP+ or equivalent.

Responsibilities

• Build and secure multi‑tenant cloud environments.
• Implement JSIG, NIST SP 800‑53, STIG, and MLS/MILS baselines across Dev/Integration/Test cloud enclaves.
• Own RMF/ATO packages for cloud environments, producing SSP, POA&M, and full RMF evidence.

Skills

Cloud security

RMF/ATO process

Vulnerability management

SAST/DAST

Documentation

Communication

Education

Bachelor’s + experience

Master’s + experience

PhD/JD + experience

Tools

Jira/Xacta

ACAS/Nessus

Terraform

Ansible

Helm

Job description

Description

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. We bring deep expertise in engineering, securing, and deploying cutting-edge technologies that support mission-critical operations. In partnership with the Assistant Secretary of the Air Force for Acquisition, Technology, and Logistics, SAIC supports programs that unify data, sensors, mission applications, cloud-based services, and emerging AI-enabled automation. These efforts empower warfighters with a decisive edge, transforming complex, multidomain information into fast, clear, and actionable decisions when it matters most. As part of this team, you will help accelerate the integration, testing, security, and transition of new capabilities into operational use. You will work side by side with operators, engineers, Capability Providers, and government teams to ensure every delivery strengthens mission readiness. This role offers the opportunity to directly shape how the Air Force sees, decides, and acts across all domains—making a tangible and immediate impact on warfighter effectiveness.

Job Duties Include

• Build and secure multi‑tenant cloud environments.

• Implement JSIG, NIST SP 800‑53, STIG, and MLS/MILS baselines across Dev/Integration/Test cloud enclaves.

• Own RMF/ATO packages for cloud environments, producing SSP, POA&M, and full RMF evidence.

• Validate STIG, ACAS/Nessus, SAST/DAST, and container-security outputs prior to environment promotion.

• Perform functional validation of CP/External cyber artifacts; coordinate delivery of validated evidence to Infrastructure TO.

• Maintain cloud‑aligned continuous monitoring, including audit logs, cloud telemetry, and Prometheus/Grafana security metrics.

• Support Cloud + DSOP joint early design efforts; collaborate to integrate pipeline‑aware cloud security.

• Validate IaC/CaC baselines (Terraform, Ansible, Helm) for secure, consistent cloud deployments and promotion gates.

• Provide cyber recommendations during CCB promotion evaluations.

• Offer WHY‑based guidance and vector checks to Capability Providers and team members.

Qualifications

Required Qualifications & Experience:

• Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience ; PhD or JD and four (4) years or more experience.

• Proven experience securing multi classification cloud environments.

• Hands on experience performing STIG review/hardening, validating ACAS/Nessus outputs, and adjudicating SAST/DAST results.

• Experience maintaining RMF/ATO artifacts (SSP, POA&M, continuous monitoring evidence).

• Familiarity with Jira/Xacta workflows for RMF and vulnerability tracking.

• DoD 8140 aligned certifications: CISSP, CCSP, CASP+, or equivalent.

Desired Qualifications and Experience:

• Experience architecting and securing hybrid cloud and MLS/MILS cross domain environments.

• Prior support to SCA assessments (finding remediation, documentation, assessor coordination).

• Knowledge of secure DevSecOps pipeline integration, including image signing, SBOM/SCA, and environment gate validation.

Desired Skills and Certifications:

• Experience with advanced cyber assessment, scanning, and STIG automation tools.

• Experience with cloud IaC/CaC security tooling (Terraform, Ansible, Helm, Argo CD).

• Familiarity with Zero Trust architecture, container hardening, and cloud security automation platforms.

• Strong documentation and communication skills aligned with RMF evidence and CMCC governance.

Target salary range: $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

SAIC is a premier technology integrator, solving our nation's most complex modernization and systems engineering challenges across the defense, space, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high‑end solutions in systems engineering and integration; enterprise IT, including cloud services; cyber; software; advanced analytics and simulation; and training. We are a team of 23,000 strong driven by mission, united purpose, and inspired by opportunity. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $6.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see Working at SAIC. EOE AA M/F/Vet/Disability