Cybersecurity Engineer - RMF A&A & Vulnerability Ops

Socket.dev; St. Louis (MO); Hybrid; USD 90,000 - 150,000; Full time

Job summary

SAIC is seeking a Cyber Security Engineer to support critical DoD and Intelligence Community missions. You will lead assessment, authorization, vulnerability management, and secure operations for classified systems.

The role requires executing RMF processes and developing ATO artifacts while coordinating with DevSecOps teams. You will implement and validate NIST 800-53 and CNSSI 1253 controls, support system hardening and patching, monitor security postures, and assist with incident response to

Qualifications

• Experience executing RMF/Assessment & Authorization (A&A).
• Ability to develop/maintain SSPs, POA&Ms, SARs, and ATO artifacts.
• Proficiency in vulnerability scanning and remediation tracking.

Responsibilities

• Execute RMF processes for Assessment & Authorization (A&A).
• Develop/maintain SSPs, POA&Ms, SARs, and ATO artifacts in XACTA/eMASS.
• Conduct vulnerability scanning and track remediation using ACAS/IAVM.
• Implement and validate NIST 800-53 and CNSSI 1253 controls.
• Support hardening, patching, STIG compliance for Windows, Linux, and networks.
• Monitor systems and assist with incident response.
• Evaluate security impacts of system changes.
• Collaborate with engineering, administration, and DevSecOps teams.

Skills

RMF/A&A

NIST 800-53

CNSSI 1253

Vulnerability management

Incident response

DevSecOps collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

XACTA

eMASS

ACAS/IAVM

Job description

SAIC is seeking a Cyber Security Engineer to support critical DoD and Intelligence Community missions. You will lead assessment, authorization, vulnerability management, and secure operations for classified systems.

The role requires executing RMF processes and developing ATO artifacts while coordinating with DevSecOps teams. You will implement and validate NIST 800-53 and CNSSI 1253 controls, support system hardening and patching, monitor security postures, and assist with incident response to