Cybersecurity Engineer RMF Specialist

SAIC • Alexandria, VA

1d • Onsite

About The Position

SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD and Federal systems. This onsite position is based at the Mark Center in Alexandria, Virginia. The role focuses on Risk Management Framework (RMF) and Authority to Operate (ATO) activities, cloud environments, and hands-on security monitoring using Azure security services and other enterprise platforms.

Requirements

• At least 9 years of hands-on cybersecurity experience.
• Bachelor’s degree and 9 or more years of experience; master’s degree and 7 or more years of experience; or PhD or JD and 4 or more years of related experience.
• Strong knowledge and practical experience with DoD and Federal cybersecurity policies and guidance.
• Experience with RMF processes, documentation, and control implementation.
• Experience developing and sustaining ATO packages.
• Experience creating, managing, and closing POA&Ms.
• Experience with Azure security tools, such as Microsoft Defender or Sentinel, or similar tools.
• Experience with at least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures, such as Azure or AWS.
• Strong written and verbal communication skills, including the ability to document security posture clearly and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, Virginia, Monday through Friday.
• Active DoD Secret security clearance.

Nice To Haves

• Willingness to deepen cloud security expertise.

Responsibilities

• Lead and support RMF activities across all steps, from categorization through continuous monitoring.
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plans of Action and Milestones (POA&Ms) to support timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools, such as Microsoft Defender for Cloud and Sentinel, and other monitoring solutions.
• Analyze security events and vulnerabilities, recommend actions, and coordinate mitigation with system owners and engineers.
• Apply DoD and Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with network, cloud, applications, and operations teams to integrate security into system design and ongoing operations.
• Document processes, maintain evidence, and support internal and external audits and inspections.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior