Cybersecurity Lead - ISSM

Saic; Chantilly (VA); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC is a trusted leader delivering advanced cyber governance for the Air Force, embedding RMF controls and securing development, integration, and test environments. This Cybersecurity Lead role supports accreditation and readiness for baseline updates across cloud and on-prem environments.

The position requires extensive RMF/DoD knowledge, Xacta and vulnerability tooling expertise, and proven leadership to mentor teams and coordinate with government partners.

Qualifications

• Bachelor's or higher in a related field with extensive cybersecurity experience.
• Expert knowledge of RMF and governance across diverse enclaves.
• Experience with Xacta, STIGs, OWASP tooling, and ACAS/Nessus artifacts.

Responsibilities

• Embed JSIG, NIST SP 800-53, STIG, and RMF controls into Air Force environments and onboarding workflows.
• Own RMF/ATO packages for Dev/Integration/Test environments; maintain SSP/POA&M artifacts.
• Lead cyber governance and validate artifacts for readiness in baseline updates.
• Provide hands-on support to Cloud and DSOP cyber engineers during complex tasks.
• Represent Cyber on ARB/CCB and advise on environment promotion gates.
• Identify cyber gaps and drive corrective-action plans aligned to mission objectives.
• Ensure MLS/MILS boundary compliance and multi-tenant security patterns.
• Mentor cyber team and enforce clear communication and vector checks.

Skills

RMF governance

Cybersecurity governance

Xacta

STIGs

Nessus

Cloud security

Education

Bachelor's degree

Master's degree

PhD or JD (considered)

Tools

Xacta

ACAS/Nessus

OWASP tooling

STIG automation tools

Job description

Description

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. We bring deep expertise in engineering, securing, and deploying cutting-edge technologies that support mission-critical operations. In partnership with the Assistant Secretary of the Air Force for Acquisition, Technology, and Logistics, SAIC supports programs that unify data, sensors, mission applications, cloud-based services, and emerging AI-enabled automation. These efforts empower warfighters with a decisive edge, transforming complex, multidomain information into fast, clear, and actionable decisions when it matters most. As part of this team, you will help accelerate the integration, testing, security, and transition of new capabilities into operational use. You will work side by side with operators, engineers, Capability Providers, and government teams to ensure every delivery strengthens mission readiness. This role offers the opportunity to directly shape how the Air Force sees, decides, and acts across all domains—making a tangible and immediate impact on warfighter effectiveness.
The Cybersecurity Lead is responsible for cyber governance, acting as the senior technical and accreditation authority. This role ensures Capability Providers and Externals deliver complete, technically validated cyber artifacts and coordinates with the Infrastructure Task Order to support inclusion into the Baseline. The Cybersecurity Lead maintains all RMF/ATO packages for development, integration, and test environments, leads continuous monitoring, participates in CCB promotion decisions, and provides hands on support to Cloud and DSOP engineers. The Lead reinforces mission alignment, technical excellence, active communication, WHY based guidance, and real time vector checks.

Job Duties Include:

• Embed JSIG, NIST SP 800‑53, STIG, and RMF controls into Air Force environments and capability onboarding workflows.
• Own RMF/ATO packages for Dev/Integration/Test environments; maintain SSP/POA&M/Continuous Monitoring artifacts.
• Lead cyber governance: validate CP and External cyber artifacts, ensure technical completeness, and coordinate readiness for Infrastructure TO baseline updates.
• Provide hands‑on technical support to Cloud and DSOP cyber engineers during complex tasks, troubleshooting, or environment build‑outs.
• Represent Cyber on ARB/CCB and provide cyber recommendations for environment promotion gates.
• Review and adjudicate STIG, SAST/DAST, ACAS/Nessus, and cloud/pipeline vulnerabilities; coordinate remediation across DSOPS, Platform, Cloud, CE, and CP teams.
• Identify systemic cyber gaps early and lead corrective‑action plans aligned to mission objectives.
• Ensure MLS/MILS boundary compliance and alignment with multi‑tenant security patterns.
• Mentor and develop the Cyber team; reinforce communication expectations, WHY behind requirements, active participation, vector checks, and accountability.

Qualifications

Required Qualifications & Experience:

• Bachelors and fourteen (14) years or more experience; Masters and twelve (12) years or more experience; PhD or JD and nine (9) years or more experience.
• Expert knowledge of RMF and cybersecurity governance across diverse enclaves.
• Experience with Xacta, STIGs, OWASP tooling, and ACAS/Nessus vulnerability adjudication.
• DoD 8140‑aligned certifications such as CISSP, CCSP, GIAC Security Engineer (GSE), CASP+, or equivalent.

Desired Qualifications and Experience:

• Experience validating JSIG requirements and NIST SP 800‑53 controls across development, integration, and test environments.
• Background in cloud and container security.
• Prior leadership experience building, developing, and mentoring cyber teams.

Desired Skills and Certifications:

• Experience with advanced cyber assessment, scanning, and STIG automation tools.
• Familiarity with Zero Trust, MLS/MILS concepts, cross domain security, and secure cloud/container architectures.
• Strong documentation, communication, and coordination habits aligned with RMF evidence and cyber governance workflows.

Target salary range: $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.