Cybersecurity Engineer RMF Specialist

SAIC • Alexandria, VA

2d • Onsite

About The Position

SAIC is seeking an experienced Cybersecurity Engineer specializing in Risk Management Framework (RMF) compliance, monitoring, and authorization activities for DoD and Federal systems. The role is onsite at the Mark Center in Alexandria, Virginia, Monday through Friday. The ideal candidate has strong RMF and Authority to Operate (ATO) experience, is comfortable working with cloud environments, and can use security monitoring tools, including Azure security services and enterprise monitoring platforms.

The engineer will lead RMF activities, develop and maintain authorization documentation, manage remediation plans, monitor and analyze security events and vulnerabilities, and support continuous monitoring and assessments. The position also involves applying DoD and Federal cybersecurity policies, collaborating with cross-functional teams, maintaining evidence, documenting processes, and supporting audits and inspections. An active DoD Secret security clearance is required.

Requirements

• At least 9 years of hands-on cybersecurity experience.
• Bachelor’s degree and 9 or more years of experience; master’s degree and 7 or more years of experience; or Ph.D. or JD and 4 or more years of related experience.
• Strong knowledge and practical experience with DoD/Federal cybersecurity policy and guidance.
• Experience with RMF processes, documentation, and control implementation.
• Experience developing and sustaining ATO packages.
• Experience creating, managing, and closing POA&Ms.
• Experience with Azure security tools such as Microsoft Defender or Sentinel, or similar tools.
• Experience with at least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures such as Azure or AWS.
• Strong written and verbal communication skills, including the ability to document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, Virginia, Monday through Friday.
• Active DoD Secret security clearance.

Nice To Haves

• Willingness to deepen cloud security expertise.

Responsibilities

• Lead and support RMF activities across all steps, from categorization through continuous monitoring.
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plans of Action and Milestones (POA&Ms) to ensure timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools such as Microsoft Defender for Cloud and Sentinel, as well as other monitoring solutions including SIEM, vulnerability scanners, and endpoint protection.
• Analyze security events and vulnerabilities, recommend actions, and coordinate mitigation with system owners and engineers.
• Apply DoD and Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring activities and periodic security assessments.
• Collaborate with network, cloud, application, and operations teams to integrate security into system design and ongoing operations.
• Document processes, maintain evidence, and support internal and external audits and inspections.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior