Senior Cyber Security Analyst

SAIC•Hill AFB, UT

3d•Onsite

About The Position

SAIC is seeking a Senior Cyber Security Analyst – Wasatch ISSE to support our IS Governance, Risk & Compliance organization. This role is focused on ensuring confidentiality, integrity, and availability of classified information systems and networks supporting a critical defense program at Hill AFB, Utah. The selected candidate will serve as a technical ISSE/cybersecurity expert, partnering closely with the ISSM, system owners, and mission stakeholders to engineer secure architectures, maintain compliance, and lead risk‑based security initiatives.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related engineering field and 5+ years of relevant experience
Active final Secret clearance required on date of hire, and must meet DoD 8570.01‑M IAT Level II or IAM Level I (or higher) certification requirements (e.g., Security+ CE, CySA+, CASP+, CISSP).
Demonstrated professional experience in information security with a track record of leading large‑scale security projects or programs, preferably in defense or aerospace.
Experience designing and implementing secure network architectures, including Zero Trust environments and cloud security frameworks (AWS, Azure, or GCP).
Strong background with regulatory frameworks such as NIST 800‑53/800‑171, ISO 27001, CMMC, or SOC 2, and hands‑on experience conducting risk, vulnerability, and security control assessments.
Expert‑level knowledge of security tooling, including SIEM (Splunk, Sentinel), EDR/XDR, firewalls, and vulnerability scanners (Nessus, Qualys), plus experience integrating security into CI/CD pipelines using SAST/DAST.

Nice To Haves

Experience in Cross‑Domain Solutions (CDS), air‑gapped networks, and highly classified defense environments; prior work with legacy‑to‑cloud or hybrid‑cloud security transitions.
Proven security leadership experience as a Lead, Architect, or ISSE responsible for the security roadmap of a product line, program, or business unit.
Proficiency in Python, Go, or PowerShell for security automation (SOAR) and infrastructure as code (e.g., Terraform, Ansible); familiarity with PKI, HSMs, and emerging quantum‑resistant encryption.
Experience with red teaming/adversarial simulation and application of ML/AI techniques for anomaly detection and threat hunting, plus a history of security community contributions (white papers, conferences, open‑source).

Responsibilities

Design, implement, and maintain security controls and architectures for classified information systems and networks, ensuring compliance with DoD and customer cybersecurity requirements.
Conduct and document risk and vulnerability assessments, threat modeling, and security audits; provide mitigation recommendations to the ISSM and program leadership.
Develop, update, and maintain Body of Evidence (BoE) artifacts (e.g., SSPs, POA&Ms, ST&E documentation) and support certification/accreditation activities under RMF and related frameworks.
Lead or support incident response and digital forensics for high‑severity security events; perform root cause analyses and drive corrective actions to closure.
Utilize and optimize security tools (e.g., SIEM, EDR/XDR, firewalls, vulnerability scanners) to monitor, detect, and remediate threats across classified and associated unclassified environments.
Collaborate with technical and business stakeholders to translate mission/business requirements into a security roadmap, and communicate complex cyber risks to non‑technical leadership.