Cybersecurity Engineer RMF Specialist

SAIC • Alexandria, VA

2d • Onsite

About The Position

SAIC is seeking an experienced Cybersecurity Engineer to support compliance, monitoring, and authorization activities for DoD and federal systems. The role is onsite at the Mark Center in Alexandria, Virginia. The ideal candidate has strong Risk Management Framework (RMF) and Authority to Operate (ATO) experience, is comfortable with cloud environments, and can work hands-on with security monitoring tools, including Azure security services and enterprise monitoring platforms.

The engineer supports RMF activities from categorization through continuous monitoring; develops and maintains ATO packages and related artifacts; tracks remediation plans; monitors security events and vulnerabilities; and works with system owners, engineers, and cross-functional teams to integrate security into system design and operations. The position also applies DoD and federal cybersecurity policies, documents processes and evidence, and supports audits and inspections.

This is a full-time, onsite, day-shift position requiring an active DoD Secret clearance and onsite work at the Mark Center Monday through Friday. Travel is approximately 10% of the time. The target salary range is $140,001–$180,000, with the estimate based on experience and other factors.

Requirements

• At least 9 years of hands-on cybersecurity experience.
• Bachelor’s degree with 9 or more years of experience, master’s degree with 7 or more years of experience, or PhD or JD with 4 or more years of related experience.
• Strong knowledge and practical experience with DoD and federal cybersecurity policy and guidance.
• Experience with RMF processes, documentation, and control implementation.
• Experience developing and sustaining ATO packages.
• Experience creating, managing, and closing POA&Ms.
• Experience with Azure security tools such as Microsoft Defender or Sentinel, or similar tools.
• Experience with at least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures such as Azure or AWS, and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills, including the ability to document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, Virginia, Monday through Friday.
• Active DoD Secret security clearance.

Responsibilities

• Lead and support RMF activities across all steps, from categorization through continuous monitoring.
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plans of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools such as Microsoft Defender for Cloud and Sentinel, as well as other monitoring solutions.
• Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
• Apply DoD and federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with network, cloud, application, and operations teams to integrate security into system design and ongoing operations.
• Document processes, maintain evidence, and support internal and external audits and inspections.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior