Cybersecurity Engineer - ISSO

Saic; St. Louis (MO); On-site; USD 120,000 - 170,000; Full time

Job summary

SAIC is seeking a Cyber Security Engineer to lead assessment, authorization, vulnerability management, and secure operations for DoD and Intelligence Community missions. Expect hands-on RMF, A&A, and artifact development using XACTA/eMASS, plus strong collaboration with DevSecOps teams.

The role requires TS/SCI clearance, a degree with 5+ years of experience, and expertise in NIST controls, IAT II+ certifications, and incident response. Expect a challenging, mission-critical environment.

Qualifications

• Active TS/SCI clearance required.
• Bachelor’s degree plus 5 years of experience or equivalent.
• DoD 8570 IAT II+ (Security+, CySA+, CISSP, etc.).
• Hands-on RMF, POA&M, ATO documentation experience.

Responsibilities

• Execute RMF processes for Assessment & Authorization (A&A).
• Develop/maintain SSPs, POA&Ms, SARs, and ATO artifacts in XACTA/eMASS.
• Conduct vulnerability scanning and track remediation using ACAS/IAVM.
• Implement and validate NIST 800-53 and CNSSI 1253 controls.
• Support hardening, patching, STIG compliance for Windows, Linux, and networks.
• Monitor systems and assist with incident response.
• Evaluate security impacts of system changes.
• Collaborate with engineering, administration, and DevSecOps teams.

Skills

Active TS/SCI clearance

Polygraph clearance

RMF / A&A

POA&Ms / ATO documentation

ACAS / IAVM

NIST 800-53 / CNSSI 1253

STIGs / patching / hardening

Incident response

Strong communication

Education

Bachelor’s degree

Tools

XACTA

eMASS

ACAS

IAVM

Job description

SAIC is seeking a Cyber Security Engineer to support critical DoD and Intelligence Community missions. You will lead assessment, authorization, vulnerability management, and secure operations for classified systems.

Responsibilities

• Execute RMF processes for Assessment & Authorization (A&A).
• Develop/maintain SSPs, POA&Ms, SARs, and ATO artifacts in XACTA/eMASS.
• Conduct vulnerability scanning and track remediation using ACAS/IAVM.
• Implement and validate NIST 800‑53 and CNSSI 1253 controls.
• Support hardening, patching, STIG compliance for Windows, Linux, and networks.
• Monitor systems and assist with incident response.
• Evaluate security impacts of system changes.
• Collaborate with engineering, administration, and DevSecOps teams.

Qualifications

Required Qualifications

• Active TS/SCI clearance. Candidates must have this clearance to be considered.
• Willing and able to pass a polygraph.
• Bachelor’s degree + 5 years of experience (or equivalent).
• Active or Current TS/SCI.
• DoD 8570 IAT II+ (Security+, CySA+, CISSP, etc.).
• Hands‑on RMF, POA&M, ATO documentation experience.
• Experience with ACAS, IAVM tracking.
• Knowledge of STIGs, patching, system hardening.
• Familiarity with NIST publications and incident‑response processes.
• Strong analytical and communication skills.

Desired Qualifications

• Scripting experience (Python, Java, React).
• DevSecOps pipeline experience.
• Linux/Windows, databases, or web app experience.
• Familiarity with Agile tools (Jira, Confluence).
• Experience with NIST SP 800‑171.