Cybersecurity Engineer RMF Specialist

SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD/Federal systems., * Lead and support Risk Management Framework (RMF) activities across all steps (categorization through continuous monitoring).

• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plan of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools (e.g., Microsoft Defender for Cloud, Sentinel) and other monitoring solutions (e.g., SIEM, vulnerability scanners, endpoint protection).
• Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
• Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with cross-functional teams (network, cloud, applications, operations) to integrate security into system design and ongoing operations.
• Document processes, maintain evidence, and support internal and external audits/inspections.

The ideal candidate has strong RMF and ATO experience, is comfortable with cloud environments, and can work hands-on with security monitoring tools (including Azure security services and other enterprise monitoring platforms)., * Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more related experience, * Minimum 9 years of hands-on cybersecurity experience.

• Strong knowledge and practical experience with:
• DoD/Federal cybersecurity policy and guidance.
• RMF processes, documentation, and control implementation.
• ATO package development and sustainment.
• POA&M creation, management, and closure.
• Experience with security monitoring tools, including:
• Azure security tools (e.g., Microsoft Defender, Sentinel, or similar).
• At least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures (Azure, AWS, or similar) and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday-Friday.

Clearance:

• Active DoD Secret security clearance.

Target salary range: $140,001 - $180,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.