Senior Principal Cyber Engineer

SAIC; San Diego (CA); On-site; USD 180,000 - 250,000; Full time

Job summary

SAIC in San Diego, CA seeks a Senior Principal Cybersecurity Engineer to advance secure Navy communications systems. This on-site role requires deep engineering expertise, offensive security experience, and a proven track record securing classified environments. You will work with engineers, PMs, and government personnel to deliver resilient systems.

Requires DoD/IC experience, active Top Secret clearance to start, and the ability to obtain TS/SCI after start. Travel up to 10% may be required.

Qualifications

• This role requires a Bachelors in Cybersecurity, CS or Engineering with 9+ years experience; Masters with 12+ years is preferable.
• Hands-on cybersecurity engineering with DoD/IC experience and penetration testing/red team background.
• Experience with air-gap architecture, data diodes, and secure offline transfer mechanisms.

Responsibilities

• Plan and execute penetration test exercises against systems, networks, and applications.
• Perform network traffic analysis and threat detection using Wireshark and other tools.
• Architect and harden IT systems in classified environments and align with DoD standards.
• Conduct vulnerability assessments and develop mitigation strategies per DISA STIGs.
• Document vulnerabilities with risks and recommendations to improve security posture.
• Stay current on exploits, hacking techniques, and security tools for government reporting.

Skills

Penetration testing

Threat detection

Network security

Scripting

Security frameworks

Education

Bachelor's in Cybersecurity/CS/Engineering

Tools

Wireshark

HSM/TPM/PKI

VMware ESXi/Hyper-V/Docker

Job description

SAIC is seeking a Senior Principal Cybersecurity Engineer to support critical Navy communication systems within the DoD. This role is ideal for a hands-on security professional with deep engineering expertise, offensive security experience, and a proven track record finding vulnerabilities, and securing classified and high-security environments. You will serve as a key technical expert collaborating with engineers, program managers, and government personnel to deliver secure, resilient strategic systems.

This role is fully ON-SITE in San Diego, CA. Must be local to area. Up to 10% travel involved.

JOB DUTIES:

• Plan and execute penetration test exercises against systems, networks, and applications simulating real world environment.
• Perform network traffic analysis and threat detection using Wireshark and other offensive/defensive security tools.
• Architect and harden IT systems, virtualized environments, and network security devices in classified settings.
• Conduct vulnerability assessments and develop mitigation strategies aligned with DISA STIGs and DoD standards.
• Documenting vulnerabilities, detailing risks, and provide recommendations and measures to improve security posture.
• Keep up to date and report to government the latest exploits, hacking techniques, and security tools.

REQUIREMENTS :

Education and Experience:

Bachelors in Cybersecurity, Computer Science, Engineering and nine (14) years or more experience; master's degree and twelve (12) years or more experience. Years of experience in lieu of degree to be considered.

• 5-7 Years relevant hands on experience with Cybersecurity Engineering or related discipline.
• 5+ years hands on designing, implementing, or supporting hardened IT systems in classified or high-security environments.
• Proven penetration testing and/or red team experience against DoD/IC systems.
• Demonstrated experience with air-gap architecture, data diodes, and secure offline transfer mechanisms.

Clearance:

• Must be a U.S. Citizen.
• Must have an Active Top Secret clearance to start.
• Must be able to obtain a TS/SCI after start.

Technical Skills:

• Deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG).
• Proficiency with network security devices (firewalls, IDS/IPS, routers, switches) and secure protocols (IPSec, TLS/DTLS, SSH, S/MIME).
• Network traffic analysis using Wireshark.
• Strong scripting/programming skills (Python, Bash, PowerShell, C/C++).
• Experience with HSM, TPM, and PKI implementation.
• Familiarity with virtualization/containers (VMware ESXi, Hyper-V, Docker) in hardened, secure contexts.

DESIRED SKILLS:

• 10+ years supporting DoD/DoN Navy-focused programs.
• Experience with NIWC Pacific or Navy organizations.
• Familiarity with NIAP and Common Criteria technologies.
• Strong communication skills for senior leadership and multidisciplinary team engagement.
• Splunk Enterprise Security experience.
• Python, PowerShell, Bash, or other automation/programming experience.
• Experience with REST APIs and cybersecurity tool integrations.

Certifications:

• SecurityX or CISSP certification, including candidates actively pursuing either certification.
• Certifications such as OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), or CISSP are highly valued.
• Offensive security certifications (OSCP, GPEN, or GWAPT).