DoD Cybersecurity Engineer — RMF, Vulnerability & Incident Response

Saic; Crane (IN); On-site; USD 110,000 - 160,000; Full time

Job summary

SAIC is looking for a Cybersecurity Engineer to support the Crane NSWC team in Crane, IN. The role leads RMF package development, assessments, and continuous monitoring, collaborating with software and systems engineering, and serving as liaison to the ISSM.

Responsibilities include vulnerability assessments, incident support, and implementing secure designs and boundary protections such as firewalls and IDS/IPS.

Qualifications

• Degree with 5+ years experience or Master’s degree with 3+ years experience.
• Must meet IASAE Level II baseline qualification.
• Must be able to obtain/maintain DoD Secret Clearance; Interim Secret required to start; SAIC will sponsor clearance.

Responsibilities

• Lead RMF package development, update, and submission in government repositories (e.g., eMASS).
• Conduct security control assessments and draft POA&M; maintain continuous monitoring strategies.
• Perform automated and manual vulnerability assessments using tools like ACAS (Nessus) and SCAP.
• Act as primary liaison between software/systems engineering and the ISSM.
• Analyze security logs, detect anomalies, and support incident response or forensics.
• Apply system security engineering to implement secure designs, configurations, and boundary defenses (firewalls, IDS/IPS, access controls).

Skills

Cybersecurity

Security engineering

Education

Bachelor's degree in Computer Science, Information Assurance, System Engineering, or a related technical discipline

IASAE Level II

Job description

SAIC is looking for a Cybersecurity Engineer to support the Crane NSWC team in Crane, IN. The role leads RMF package development, assessments, and continuous monitoring, collaborating with software and systems engineering, and serving as liaison to the ISSM.

Responsibilities include vulnerability assessments, incident support, and implementing secure designs and boundary protections such as firewalls and IDS/IPS.