Cybersecurity Engineer RMF Specialist

SAIC; Alexandria (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

SAIC is seeking an experienced Cybersecurity Engineer to support RMF, ATO packages, and continuous monitoring for DoD/Federal systems. This onsite role is based at the Mark Center in Alexandria, VA.

You will lead RMF activities, develop SSPs/SARs, manage POA&Ms, and monitor Azure Defender/Sentinel and SIEM tools. Strong collaboration with cross-functional teams and clear documentation for audits are essential.

Qualifications

• 9+ years of hands-on cybersecurity experience.
• Experience with RMF processes, documentation, and control implementation.
• ATO package development and sustainment.
• POA&Ms creation, management, and closure.
• Experience with security monitoring tools, including Azure security tools and SIEM.

Responsibilities

• Lead RMF activities across all steps (categorization through continuous monitoring).
• Develop, update, and maintain ATO packages, including SSPs and SARs.
• Create, track, and manage POA&Ms to ensure timely remediation of findings.
• Configure, monitor security alerts and dashboards using Azure Defender/Sentinel and SIEM.
• Analyze security events and vulnerabilities, coordinate mitigation with owners and engineers.
• Apply DoD/Federal cybersecurity policies and guidelines to operations.
• Document processes and support audits/inspections.

Skills

RMF processes

DoD/Federal policy

ATO development

POA&M management

Cloud security

Written and verbal communication

Education

Bachelor's degree + 9+ years experience

Master's degree + 7+ years experience

PhD/JD + 4+ years experience

Tools

Azure Defender

Microsoft Sentinel

SIEM

Vulnerability management tools

Job description

SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD/Federal systems.

This position will be onsite at the Mark Center in Alexandria, Virginia.

Key Responsibilities:

• Lead and support Risk Management Framework (RMF) activities across all steps (categorization through continuous monitoring).
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plan of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools (e.g., Microsoft Defender for Cloud, Sentinel) and other monitoring solutions (e.g., SIEM, vulnerability scanners, endpoint protection).
• Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
• Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with cross-functional teams (network, cloud, applications, operations) to integrate security into system design and ongoing operations.
• Document processes, maintain evidence, and support internal and external audits/inspections.

Required Education:

• Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more related experience

Required Qualifications:

• Minimum 9 years of hands-on cybersecurity experience.
• Strong knowledge and practical experience with:
  • DoD/Federal cybersecurity policy and guidance.
  • RMF processes, documentation, and control implementation.
  • ATO package development and sustainment.
  • POA&Ms creation, management, and closure.
• Experience with security monitoring tools, including:
  • Azure security tools (e.g., Microsoft Defender, Sentinel, or similar).
  • At least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures (Azure, AWS, or similar) and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday-Friday.

Clearance:

Active DoD Secret security clearance.