Cyber Action Officer

Description

SAIC is seeking qualified applicants to supportacutting-edgedata, analytics, and AI platform. Roles include managing customer relationships, service portfolio and catalog management, software engineering &development,data/AI engineering, IT systems operations, anduse case intake and analytics forDoWenterprise-scale missionobjectivesexpected in Spring/Summer 2026.

Positions are contingent pending contract award.

A majority ofthe opportunities arein the Washington DC Metropolitan Area (WDCMA).Some work may be performed remotely, subject to Government approval.

• Oversee cybersecurity policy compliance across all WDP cloud and security environments in accordance with Federal, DoW, and agency policies.
• Maintain all WDP system authorizations across multiple security enclaves.
• Apply DoW Risk Management Framework (RMF) and Zero Trust Architecture principles across the cybersecurity lifecycle.
• Review policies, documentation, and regulations and prepare responses to RFIs.
• Safeguard networks, systems, and digital assets through:
  • Planning.
  • Implementation.
  • Upgrades.
  • Monitoring.
• May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure.
• May respond to cybersecurity incidents, ensuring appropriate controls are maintained.

Education and Experience:

• Bachelors & 9+ years of related experience, Masters & 7+ years of experience, or PhD or JD & 5+ years of experience.

Certifications:

• ISC2 Certified Information Systems Security Professional (or equivalent such as GIAC Information Security Professional).

Knowledge, Skills, Abilities, and

Competencies:

• Deep knowledge of Federal, DoW, and agency cybersecurity policies.
• Skill in maintaining authorizations and security compliance across multiple enclaves.
• Ability to apply RMF and Zero Trust Architecture concepts.
• Competency in reviewing cybersecurity documentation, policies, and regulations.
• Competency in incident response and safeguarding digital assets.
• Competencies with the National Initiative for Cybersecurity Education (NICE) Framework:
  • Perform Cybersecurity Defense Analysis.
  • Conduct Incident Response.
  • Conduct Threat Analysis and Exploitation Analysis.
  • Conduct Cyber Investigations.
• Knowledge of Identity and Access Management operations.
• Skills to use COTS/GOTS applications, ticketing systems, lab systems, forensic applications, and/or custom TTPs to:
  • Monitor systems for abnormal events.
  • Determine if events are to be deemed an incident.
  • Determine if incidents are due to malicious or nefarious actions.
  • Determine appropriate levels of response.
• Ability to integrate Security Technical Implementation Guide (STIG) updates and Cyber Vulnerabilities and Exposures (CVEs) into Change Management structure for implementation.