Cybersecurity Engineer RMF Specialist

SAIC is hiring an experienced Cybersecurity Engineer RMF Specialist to support cybersecurity compliance work for DoD and Federal systems. This onsite role is based at the Mark Center in Alexandria, Virginia, and focuses on RMF execution, ATO package development, security monitoring, and continuous monitoring activities.

The position supports authorization-related deliverables, including key documentation and evidence, while partnering with technical teams to integrate security into system design and ongoing operations.

Role Summary

• Lead and support Risk Management Framework (RMF) activities across all steps, from categorization through continuous monitoring.
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plan of Action and Milestones (POA&Ms) to support timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools such as Microsoft Defender for Cloud and Sentinel, along with other monitoring solutions including SIEM, vulnerability scanners, and endpoint protection.
• Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
• Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with cross-functional teams including network, cloud, applications, and operations to integrate security into both design and day-to-day operations.
• Document processes, maintain evidence, and support internal and external audits and inspections.

Required Qualifications

• Minimum 9 years of hands-on cybersecurity experience.
• Strong practical knowledge of DoD/Federal cybersecurity policy and guidance.
• Strong practical knowledge of RMF processes, documentation, and control implementation.
• Strong practical knowledge of ATO package development and sustainment.
• Strong practical knowledge of POA&M creation, management, and closure.
• Experience with security monitoring tools including Azure security tools such as Microsoft Defender for Cloud and Sentinel (or similar).
• Experience with security monitoring tools including at least one enterprise SIEM and at least one vulnerability management tool.
• Understanding of cloud architectures (e.g., Azure, AWS, or similar) and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.
• Active DoD Secret security clearance.

Technologies

• Risk Management Framework (RMF)
• ATO
• System Security Plans (SSPs)
• Security Assessment Reports (SARs)
• Plan of Action and Milestones (POA&Ms)
• Microsoft Defender for Cloud
• Sentinel
• SIEM
• Vulnerability scanners
• Endpoint protection
• Azure
• AWS

Job Details

• Location: Alexandria, VA, US (onsite)
• Schedule: Full-Time
• Shift: Day Job
• Travel: Yes - 10% of the time
• Schedule Details: Monday–Friday onsite at the Mark Center
• Clearance: Active DoD Secret security clearance
• Salary Range: USD 140,001 - 180,000 per yearly
• Minimum Clearance Required: Secret
• Potential for Remote Work: ORA_ON_SITE
• Date Posted: 2026-11-02
• Category: Cyber
• Subcategory: Cyber Engineer