RMF Cybersecurity Engineer - DoD Compliance (Onsite)

SAIC; Alexandria (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

SAIC is seeking an experienced Cybersecurity Engineer to support RMF, ATO packages, and continuous monitoring for DoD/Federal systems. This onsite role is based at the Mark Center in Alexandria, VA.

You will lead RMF activities, develop SSPs/SARs, manage POA&Ms, and monitor Azure Defender/Sentinel and SIEM tools. Strong collaboration with cross-functional teams and clear documentation for audits are essential.

Qualifications

• 9+ years of hands-on cybersecurity experience.
• Experience with RMF processes, documentation, and control implementation.
• ATO package development and sustainment.
• POA&Ms creation, management, and closure.
• Experience with security monitoring tools, including Azure security tools and SIEM.

Responsibilities

• Lead RMF activities across all steps (categorization through continuous monitoring).
• Develop, update, and maintain ATO packages, including SSPs and SARs.
• Create, track, and manage POA&Ms to ensure timely remediation of findings.
• Configure, monitor security alerts and dashboards using Azure Defender/Sentinel and SIEM.
• Analyze security events and vulnerabilities, coordinate mitigation with owners and engineers.
• Apply DoD/Federal cybersecurity policies and guidelines to operations.
• Document processes and support audits/inspections.

Skills

RMF processes

DoD/Federal policy

ATO development

POA&M management

Cloud security

Written and verbal communication

Education

Bachelor's degree + 9+ years experience

Master's degree + 7+ years experience

PhD/JD + 4+ years experience

Tools

Azure Defender

Microsoft Sentinel

SIEM

Vulnerability management tools

Job description

SAIC is seeking an experienced Cybersecurity Engineer to support RMF, ATO packages, and continuous monitoring for DoD/Federal systems. This onsite role is based at the Mark Center in Alexandria, VA.

You will lead RMF activities, develop SSPs/SARs, manage POA&Ms, and monitor Azure Defender/Sentinel and SIEM tools. Strong collaboration with cross-functional teams and clear documentation for audits are essential.