Senior Cyber Security Analyst

Saic; Hill Air Force Base (UT); On-site; USD 120,000 - 180,000; Full time

Job summary

SAIC is seeking a Senior Cyber Security Analyst – Wasatch ISSE to support our IS Governance, Risk & Compliance organization at Hill AFB, Utah. The role focuses on ensuring confidentiality, integrity, and availability of classified systems and networks for a critical defense program.

You will engineer secure architectures, maintain compliance, and lead risk‑based security initiatives in collaboration with the ISSM, system owners, and mission stakeholders.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related engineering field and 5+ years of relevant experience.
• Active final Secret clearance required on date of hire, and must meet DoD 8570.01‑M IAT Level II or IAM Level I (or higher) certification requirements (e.g., Security+ CE, CySA+, CASP+, CISSP).
• Demonstrated professional experience in information security with a track record of leading large‑scale security projects or programs, preferably in defense or aerospace.
• Experience designing and implementing secure network architectures, including Zero Trust environments and cloud security frameworks (AWS, Azure, or GCP).
• Strong background with regulatory frameworks such as NIST 800‑53/800‑171, ISO 27001, CMMC, or SOC 2, and hands‑on experience conducting risk, vulnerability, and security control assessments.
• Expert‑level knowledge of security tooling, including SIEM (Splunk, Sentinel), EDR/XDR, firewalls, and vulnerability scanners (Nessus, Qualys), plus experience integrating security into CI/CD pipelines using SAST/DAST.

Responsibilities

• Design, implement, and maintain security controls and architectures for classified information systems and networks, ensuring compliance with DoD and customer cybersecurity requirements.
• Conduct and document risk and vulnerability assessments, threat modeling, and security audits; provide mitigation recommendations to the ISSM and program leadership.
• Develop, update, and maintain Body of Evidence (BoE) artifacts (e.g., SSPs, POA&Ms, ST&E documentation) and support certification/accreditation activities under RMF and related frameworks.
• Lead or support incident response and digital forensics for high‑severity security events; perform root cause analyses and drive corrective actions to closure.
• Utilize and optimize security tools to monitor, detect, and remediate threats across classified and associated unclassified environments.
• Collaborate with technical and business stakeholders to translate mission/business requirements into a security roadmap, and communicate complex cyber risks to non‑technical leadership.

Skills

Cloud security

Zero Trust

Risk assessments

Threat modeling

SIEM expertise

Security automation

Education

Bachelor’s degree in Computer Science/Cybersecurity/Information Technology

Tools

SIEM (Splunk/Sentinel)

EDR/XDR

Firewalls

Nessus/Qualys

CI/CD security (SAST/DAST)

Job description

Description

SAIC is seeking a Senior Cyber Security Analyst – Wasatch ISSE to support our IS Governance, Risk & Compliance organization. This role is focused on ensuring confidentiality, integrity, and availability of classified information systems and networks supporting a critical defense program at Hill AFB, Utah. The selected candidate will serve as a technical ISSE/cybersecurity expert, partnering closely with the ISSM, system owners, and mission stakeholders to engineer secure architectures, maintain compliance, and lead risk‑based security initiatives.

Job Duties

• Design, implement, and maintain security controls and architectures for classified information systems and networks, ensuring compliance with DoD and customer cybersecurity requirements.
• Conduct and document risk and vulnerability assessments, threat modeling, and security audits; provide mitigation recommendations to the ISSM and program leadership.
• Develop, update, and maintain Body of Evidence (BoE) artifacts (e.g., SSPs, POA&Ms, ST&E documentation) and support certification/accreditation activities under RMF and related frameworks.
• Lead or support incident response and digital forensics for high‑severity security events; perform root cause analyses and drive corrective actions to closure.
• Utilize and optimize security tools (e.g., SIEM, EDR/XDR, firewalls, vulnerability scanners) to monitor, detect, and remediate threats across classified and associated unclassified environments.
• Collaborate with technical and business stakeholders to translate mission/business requirements into a security roadmap, and communicate complex cyber risks to non‑technical leadership.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related engineering field and 5+ years of relevant experience
• Active final Secret clearance required on date of hire, and must meet DoD 8570.01‑M IAT Level II or IAM Level I (or higher) certification requirements (e.g., Security+ CE, CySA+, CASP+, CISSP).
• Demonstrated professional experience in information security with a track record of leading large‑scale security projects or programs, preferably in defense or aerospace.
• Experience designing and implementing secure network architectures, including Zero Trust environments and cloud security frameworks (AWS, Azure, or GCP).
• Strong background with regulatory frameworks such as NIST 800‑53/800‑171, ISO 27001, CMMC, or SOC 2, and hands‑on experience conducting risk, vulnerability, and security control assessments.
• Expert‑level knowledge of security tooling, including SIEM (Splunk, Sentinel), EDR/XDR, firewalls, and vulnerability scanners (Nessus, Qualys), plus experience integrating security into CI/CD pipelines using SAST/DAST.

Desired Skills

• Experience in Cross‑Domain Solutions (CDS), air‑gapped networks, and highly classified defense environments; prior work with legacy‑to‑cloud or hybrid‑cloud security transitions.
• Proven security leadership experience as a Lead, Architect, or ISSE responsible for the security roadmap of a product line, program, or business unit.
• Proficiency in Python, Go, or PowerShell for security automation (SOAR) and infrastructure as code (e.g., Terraform, Ansible); familiarity with PKI, HSMs, and emerging quantum‑resistant encryption.
• Experience with red teaming/adversarial simulation and application of ML/AI techniques for anomaly detection and threat hunting, plus a history of security community contributions (white papers, conferences, open‑source).