Cybersecurity Engineer - ISSO

SAIC; Vienna (VA); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC in Vienna, VA seeks a Cyber Security Engineer to lead RMF, A&A activities and vulnerability management for DoD and IC missions.

You will develop security artifacts (SSPs, POA&Ms) and coordinate with DevSecOps, engineering and admin teams to ensure compliant, secure operations of classified systems.

Qualifications

• Bachelor’s degree + 5 years of experience in cyber security.
• Active or Current TS/SCI clearance required.
• DoD 8570 IAT II+ certification or equivalent.
• Hands-on RMF, ATO documentation and vulnerability management.

Responsibilities

• Execute RMF processes for Assessment & Authorization (A&A).
• Develop/maintain SSPs, POA&Ms, SARs, and ATO artifacts in XACTA/eMASS.
• Conduct vulnerability scanning and track remediation using ACAS/IAVM.
• Support hardening, patching, STIG compliance for Windows/Linux/networks.
• Monitor systems and assist with incident response.

Skills

RMF

A&A

Vulnerability mgmt

NIST 800-53

Security+ / CISSP

Education

Bachelor's degree

Tools

ACAS

eMASS

XACTA

Jira/Confluence

Job description

Job ID 2615272

Location Vienna, VA, US

Date Posted 2026-08-04

Category Cyber

Subcategory Cyberspace Ops

Schedule Full-Time

Shift Day Job

Travel Yes - 10% of the time

Minimum Clearance Required TS.SCI_wPoly

Clearance Level Must Be Able to Obtain None

Potential for Remote Work ORA_ON_SITE

Description

SAIC is seeking a Cyber Security Engineer to support critical DoD and Intelligence Community missions. You will lead assessment, authorization, vulnerability management, and secure operations for classified systems.

Responsibilities

• Execute RMF processes for Assessment & Authorization (A&A).
• Develop/maintain SSPs, POA&Ms, SARs, and ATO artifacts in XACTA/eMASS.
• Conduct vulnerability scanning and track remediation using ACAS/IAVM.
• Implement and validate NIST 800-53 and CNSSI 1253 controls.
• Support hardening, patching, STIG compliance for Windows, Linux, and networks.
• Monitor systems and assist with incident response.
• Evaluate security impacts of system changes.
• Collaborate with engineering, administration, and DevSecOps teams.

Qualifications

Required Qualifications

• Bachelor’s degree + 5 years of experience (or equivalent).
• Active or Current TS/SCI.
• DoD 8570 IAT II+ (Security+, CySA+, CISSP, etc.).
• Hands‑on RMF, POA&M, ATO documentation experience.
• Experience with ACAS, IAVM tracking.
• Knowledge of STIGs, patching, system hardening.
• Familiarity with NIST publications and incident‑response processes.
• Strong analytical and communication skills.

Desired Qualifications

• Scripting experience (Python, Java, React).
• DevSecOps pipeline experience.
• Linux/Windows, databases, or web app experience.
• Familiarity with Agile tools (Jira, Confluence).
• Experience with NIST SP 800-171.

Target salary range $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.