Cybersecurity Engineer | RMF A&A | Vulnerability & IR

Saic; St. Louis (MO); On-site; USD 120,000 - 170,000; Full time

Job summary

SAIC is seeking a Cyber Security Engineer to lead assessment, authorization, vulnerability management, and secure operations for DoD and Intelligence Community missions. Expect hands-on RMF, A&A, and artifact development using XACTA/eMASS, plus strong collaboration with DevSecOps teams.

The role requires TS/SCI clearance, a degree with 5+ years of experience, and expertise in NIST controls, IAT II+ certifications, and incident response. Expect a challenging, mission-critical environment.

Qualifications

• Active TS/SCI clearance required.
• Bachelor’s degree plus 5 years of experience or equivalent.
• DoD 8570 IAT II+ (Security+, CySA+, CISSP, etc.).
• Hands-on RMF, POA&M, ATO documentation experience.

Responsibilities

• Execute RMF processes for Assessment & Authorization (A&A).
• Develop/maintain SSPs, POA&Ms, SARs, and ATO artifacts in XACTA/eMASS.
• Conduct vulnerability scanning and track remediation using ACAS/IAVM.
• Implement and validate NIST 800-53 and CNSSI 1253 controls.
• Support hardening, patching, STIG compliance for Windows, Linux, and networks.
• Monitor systems and assist with incident response.
• Evaluate security impacts of system changes.
• Collaborate with engineering, administration, and DevSecOps teams.

Skills

Active TS/SCI clearance

Polygraph clearance

RMF / A&A

POA&Ms / ATO documentation

ACAS / IAVM

NIST 800-53 / CNSSI 1253

STIGs / patching / hardening

Incident response

Strong communication

Education

Bachelor’s degree

Tools

XACTA

eMASS

ACAS

IAVM

Job description

SAIC is seeking a Cyber Security Engineer to lead assessment, authorization, vulnerability management, and secure operations for DoD and Intelligence Community missions. Expect hands-on RMF, A&A, and artifact development using XACTA/eMASS, plus strong collaboration with DevSecOps teams.

The role requires TS/SCI clearance, a degree with 5+ years of experience, and expertise in NIST controls, IAT II+ certifications, and incident response. Expect a challenging, mission-critical environment.