Principal Cyber Engineer

SAIC•San Diego, CA

3d•Onsite

About The Position

SAIC is seeking a Principal Cybersecurity Engineer to support critical Navy communication systems within the DoD. This role is ideal for a hands-on security professional with deep engineering expertise, offensive security experience, and a proven track record finding vulnerabilities, and securing classified and high-security environments. You will serve as a key technical expert collaborating with engineers, program managers, and government personnel to deliver secure, resilient strategic systems. This role is fully ON-SITE in San Diego, CA. Must be local to area. Up to 10% travel involved.

Requirements

Bachelors in Cybersecurity, Computer Science, Engineering and nine (9) years or more experience; Years of experience in lieu of degree to be considered.
5-7 Years relevant hands on experience with Cybersecurity Engineering or related discipline
5+ years hands on designing, implementing, or supporting hardened IT systems in classified or high-security environments
Proven penetration testing and/or red team experience against DoD/IC systems
Demonstrated experience with air-gap architecture, data diodes, and secure offline transfer mechanisms
Must be a U.S. Citizen
Must have an Active Top Secret clearance to start
Must be able to obtain a TS/SCI after start
Deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG)
Proficiency with network security devices (firewalls, IDS/IPS, routers, switches) and secure protocols (IPSec, TLS/DTLS, SSH, S/MIME)
Network traffic analysis using Wireshark
Strong scripting/programming skills (Python, Bash, PowerShell, C/C++)
Experience with HSM, TPM, and PKI implementation
Familiarity with virtualization/containers (VMware ESXi, Hyper-V, Docker) in hardened, secure contexts

Nice To Haves

10+ years supporting DoD/DoN Navy-focused programs
Experience with NIWC Pacific or Navy organizations
Familiarity with NIAP and Common Criteria technologies
Strong communication skills for senior leadership and multidisciplinary team engagement
Splunk Enterprise Security experience.
Python, PowerShell, Bash, or other automation/programming experience.
Experience with REST APIs and cybersecurity tool integrations.
SecurityX or CISSP certification, including candidates actively pursuing either certification.
Certifications such as OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), or CISSP are highly valued.
Offensive security certifications (OSCP, GPEN, or GWAPT)

Responsibilities

Plan and execute penetration test exercises against systems, networks, and applications simulating real world environment.
Perform network traffic analysis and threat detection using Wireshark and other offensive/defensive security tools
Architect and harden IT systems, virtualized environments, and network security devices in classified settings
Conduct vulnerability assessments and develop mitigation strategies aligned with DISA STIGs and DoD standards
Documenting vulnerabilities, detailing risks, and provide recommendations and measures to improve security posture.
Keep up to date and report to government the latest exploits, hacking techniques, and security tools.