Cybersecurity Engineer RMF Specialist

Science Applications International Corp.; Alexandria (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

SAIC, a leading defense technology company, seeks an experienced Cybersecurity Engineer to support RMF/ATO activities for DoD/Federal systems. Onsite at the Mark Center in Alexandria, VA, the role emphasizes continuous monitoring, security tooling, and robust documentation.

The ideal candidate will have strong RMF and ATO experience, hands-on with Azure security services, and the ability to coordinate across cross-functional teams to enhance security posture.

Qualifications

• Minimum 9 years of hands-on cybersecurity experience.
• Strong knowledge of DoD/Federal cybersecurity policy and guidance.
• RMF processes, documentation, and control implementation.
• ATO package development and sustainment.
• POA&M creation, management, and closure.
• Experience with security monitoring tools, including Azure security tools (Microsoft Defender, Sentinel)
• At least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures (Azure, AWS) and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills; able to document posture clearly for stakeholders.
• Willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.

Responsibilities

• Lead RMF activities across all steps from categorization to continuous monitoring.
• Develop and maintain SSPs, SARs, and related artifacts for ATO.
• Create, track, and manage POA&Ms for timely remediation.
• Configure and monitor security alerts and dashboards using Azure tools and SIEMs.
• Analyze security events and vulnerabilities; coordinate mitigation with owners and engineers.
• Apply DoD/Federal cybersecurity policies to operations and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with cross-functional teams to integrate security into system design.
• Document processes, maintain evidence, and support audits/inspections.

Skills

RMF processes

ATO package

POA&M management

Azure Defender

Sentinel

SIEM

Vulnerability management

Cloud security

DoD policy

Documentation

Communication

Education

Bachelor's degree

Master's degree

PhD/JD

Tools

Microsoft Defender for Cloud

Sentinel

Vulnerability scanners

Endpoint protection

Job description

Description

SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD/Federal systems.

this position will be onsite at the Mark Center in Alexandria, Virginia.

The ideal candidate has strong RMF and ATO experience, is comfortable with cloud environments, and can work hands-on with security monitoring tools (including Azure security services and other enterprise monitoring platforms).

Key Responsibilities

• Lead and support Risk Management Framework (RMF) activities across all steps (categorization through continuous monitoring).
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plan of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools (e.g., Microsoft Defender for Cloud, Sentinel) and other monitoring solutions (e.g., SIEM, vulnerability scanners, endpoint protection).
• Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
• Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with cross-functional teams (network, cloud, applications, operations) to integrate security into system design and ongoing operations.
• Document processes, maintain evidence, and support internal and external audits/inspections.

Qualifications

Required Education

• Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more related experience.

Required Qualifications

• Minimum 9 years of hands-on cybersecurity experience.
• Strong knowledge and practical experience with:
• DoD/Federal cybersecurity policy and guidance.
• RMF processes, documentation, and control implementation.
• ATO package development and sustainment.
• POA&M creation, management, and closure.
• Experience with security monitoring tools, including:
• Azure security tools (e.g., Microsoft Defender, Sentinel, or similar).
• At least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures (Azure, AWS, or similar) and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.

Clearance

• Active DoD Secret security clearance.

Target salary range: $140,001 - $180,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.