Cyber Engineer Principal

SAIC•San Diego, CA

11h•Onsite

About The Position

SAIC is seeking a Senior Cybersecurity Engineer to support our strategic communications programs within the Department of Defense (DoD). This position is part of an essential team dedicated to the sustainment and enhancement of critical Navy communication systems, including associated operational environments (OE). As part of this role, you will lead the development, implementation, and sustainment of robust cybersecurity practices aligned with Risk Management Framework (RMF) requirements and DoD/DoN cybersecurity policies. In this role, you will collaborate with multidisciplinary teams, including engineers, program managers, and government personnel, to ensure mission-critical systems achieve and maintain compliance with Authority to Operate (ATO) and continuous monitoring requirements. You will contribute as a key technical leader, working in a dynamic, fast-paced environment where innovation and attention to detail are highly valued. This opportunity is well-suited for an experienced cybersecurity professional who thrives in complex environments and has a strong background in RMF, vulnerability management, configuration monitoring, and accreditation processes.

Requirements

Strong background in RMF, vulnerability management, configuration monitoring, and accreditation processes.
Experience with ACAS, SCAP, and other automated vulnerability assessment tools.
Familiarity with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs).
Experience developing Cybersecurity Baseline Test Plans (CSBTP) and Cybersecurity Baseline Test Reports (CSBTR).
Ability to identify and mitigate security vulnerabilities.
Experience supporting the development of test plans and associated documentation (CDRLs).
Experience collaborating with cybersecurity teams to resolve findings and integrate RMF requirements.
Ability to provide technical leadership to cyber staff.
Experience preparing and delivering documentation to government stakeholders.

Nice To Haves

Experience in strategic communications programs within the Department of Defense (DoD).
Experience with critical Navy communication systems.
Experience with continuous monitoring requirements.
Experience working in a dynamic, fast-paced environment.

Responsibilities

Propose, coordinate, implement, and enforce all DoD/DoN cybersecurity policies, standards, and methodologies for the operational environment (OE), software applications, and government test tools.
Perform risk assessments in support of RMF lifecycle activities and implement continuous monitoring plans to sustain ATO.
Assist with annual security reviews, re-authorizations, and compliance with ATO stipulations.
Conduct vulnerability assessments using tools such as ACAS, SCAP, and other automated tools to ensure compliance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs).
Develop and update cybersecurity baselines, including monthly security patching, system lockdowns, and configuration updates.
Conduct independent cybersecurity scans and audits to verify the security posture of systems before and after new configurations are implemented.
Develop Cybersecurity Baseline Test Plans (CSBTP) and Cybersecurity Baseline Test Reports (CSBTR) to document critical patching activities and ensure tested functionality.
Identify and mitigate security vulnerabilities or programming flaws that could be exploited to compromise system integrity or availability.
Support the development of test plans and associated documentation (CDRLs) for delivery to Configuration Management (CM) managers and stakeholders.
Collaborate with CS teams to resolve findings and integrate RMF requirements throughout the system lifecycle.
Provide technical leadership to other cyber staff, ensuring cohesive execution of cybersecurity efforts and compliance with emerging DoD directives.
Prepare and deliver documentation—including monthly vulnerability scan reports, risk mitigation strategies, and policy updates—to government stakeholders to achieve mission milestones.
Identify and refine cybersecurity processes to ensure sustainment of the OE, software applications, supporting tools, and infrastructure.
Enhance early detection mechanisms by incorporating automated benchmarks and efficient review processes for baseline updates.
Develop innovative solutions for emerging cybersecurity requirements within DoD/DoN frameworks.