Cybersecurity Engineer RMF Specialist

• SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD/Federal systems.
• This position will be onsite at the Mark Center in Alexandria, Virginia.
• The ideal candidate has strong RMF and ATO experience, is comfortable with cloud environments, and can work hands-on with security monitoring tools (including Azure security services and other enterprise monitoring platforms).

Key Responsibilities

• Lead and support Risk Management Framework (RMF) activities across all steps (categorization through continuous monitoring).
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plan of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools (e.g., Microsoft Defender for Cloud, Sentinel) and other monitoring solutions (e.g., SIEM, vulnerability scanners, endpoint protection).
• Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
• Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with cross-functional teams (network, cloud, applications, operations) to integrate security into system design and ongoing operations.
• Document processes, maintain evidence, and support internal and external audits/inspections.

Required Education

Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more related experience

Required Qualifications

Minimum 9 years of hands-on cybersecurity experience.

Strong knowledge and practical experience with

• DoD/Federal cybersecurity policy and guidance.
• RMF processes, documentation, and control implementation.
• ATO package development and sustainment.
• POA&M creation, management, and closure.

Experience with security monitoring tools, including

• Azure security tools (e.g., Microsoft Defender, Sentinel, or similar).
• At least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures (Azure, AWS, or similar) and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.

Clearance

Active DoD Secret security clearance.