> Markdown version of [/jobs/ext/1764020-cybersecurity-spec-principal](https://www.wearedevelopers.com/jobs/ext/1764020-cybersecurity-spec-principal). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Spec Principal

- **Company:** Science Applications International Corporation
- **Location:** Colorado Springs, CO, United States
- **Experience:** Expert
- **Salary:** $120,001.0 - $160,000.0
- **Contract:** Permanent contract
- **Skills:** Adobe Analytics, Systems Engineering, CompTIA Security+, Cyber Security, Package Management Systems, Security Content Automation Protocol, Software Vulnerability Management, Nessus
- **Published:** July 7, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9016316/cybersecurity-spec-principal

## About the Role

* Bachelor's degree and 9+ years of related cybersecurity or RMF experience
 * Active Secret security clearance
 * DoD 8570/8140 IAT Level II certification (CompTIA Security+ or equivalent)
 * Hands-on experience with ACAS/Nessus/Tenable Security Center for vulnerability management
 * Proficiency with eMASS for RMF package management, control evidence tracking, and customer-facing documentation workflows

Desired:

 * Experience supporting UEWR, PAVE PAWS, PARCS, or other Strategic Warning and Surveillance radar systems
 * Knowledge of the Integrated Tactical Warning and Attack Assessment (ITW/AA) mission set and associated enterprise
 * Expertise with RMF Rev 4 and Rev 5, including updated control implementations and evidence development
 * Prior experience repairing inherited ATO packages, improving documentation quality, and driving compliance maturity

## Description

* Lead the update, correction, and sustainment of RMF ATO packages, ensuring accuracy, traceability, and compliance with DoD cybersecurity requirements
 * Execute the migration from RMF Rev 4 to RMF Rev 5 by identifying gaps, updating control implementations, and coordinating evidence collection
 * Analyze, track, and reduce POA&Ms by validating findings, developing remediation recommendations, and coordinating closure with system engineering teams
 * Conduct system assessments including STIG compliance checks (STIG Viewer, SCAP), ACAS/Nessus vulnerability scans, and audit activities supporting ongoing authorization
 * Communicate technical risks, security requirements, and accreditation status clearly to government customers and program leadership, ensuring shared understanding and timely decision-making.


## Related Videos

- [3x Performance: A Humbling Journey](https://www.wearedevelopers.com/videos/100165-3x-performance-a-humbling-journey)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)