Cyber Engineer Principal

Job

Location: San Diego, CA, US

Date Posted:

Category: Cyber

Subcategory: Cyber Engineer

Schedule: Full-Time

Shift: Day Job

Travel: Yes - 10% of the time

Minimum Clearance Required: TS.SCI

Clearance Level Must Be Able to Obtain: None

Potential for Remote Work: _SITE

Description

SAIC is seeking a Senior Cybersecurity Engineer to support our strategic communications programs within the Department of Defense (DoD). This position is part of an essential team dedicated to the sustainment and enhancement of critical Navy communication systems, including associated operational environments (OE). As part of this role, you will lead the development, implementation, and sustainment of robust cybersecurity practices aligned with Risk Management Framework (RMF) requirements and DoD/DoN cybersecurity policies.

In this role, you will collaborate with multidisciplinary teams, including engineers, program managers, and government personnel, to ensure mission-critical systems achieve and maintain compliance with Authority to Operate (ATO) and continuous monitoring requirements. You will contribute as a key technical leader, working in a dynamic, fast-paced environment where innovation and attention to detail are highly valued.
This opportunity is well-suited for an experienced cybersecurity professional who thrives in complex environments and has a strong background in RMF, vulnerability management, configuration monitoring, and accreditation processes.

This role will be ONSITE in SAN DIEGO, CA.

JOB DUTIES:

• Cybersecurity Compliance and RMF Activities:
  • Propose, coordinate, implement, and enforce all DoD/DoN cybersecurity policies, standards, and methodologies for the operational environment (OE), software applications, and government test tools.
  • Perform risk assessments in support of RMF lifecycle activities and implement continuous monitoring plans to sustain ATO.
  • Assist with annual security reviews, re-authorizations, and compliance with ATO stipulations.
• Vulnerability Management and Mitigation:
  • Conduct vulnerability assessments using tools such as ACAS, SCAP, and other automated tools to ensure compliance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs).
  • Develop and update cybersecurity baselines, including monthly security patching, system lockdowns, and configuration updates.
  • Conduct independent cybersecurity scans and audits to verify the security posture of systems before and after new configurations are implemented.
• Baseline Development and Testing:
  • Develop Cybersecurity Baseline Test Plans (CSBTP) and Cybersecurity Baseline Test Reports (CSBTR) to document critical patching activities and ensure tested functionality.
  • Identify and mitigate security vulnerabilities or programming flaws that could be exploited to compromise system integrity or availability.
  • Support the development of test plans and associated documentation (CDRLs) for delivery to Configuration Management (CM) managers and stakeholders.
• Stakeholder Collaboration:
  • Collaborate with CS teams to resolve findings and integrate RMF requirements throughout the system lifecycle.
  • Provide technical leadership to other cyber staff, ensuring cohesive execution of cybersecurity efforts and compliance with emerging DoD directives.
  • Prepare and deliver documentation-including monthly vulnerability scan reports, risk mitigation strategies, and policy updates-to government stakeholders to achieve mission milestones.
• Process Improvement and Innovation:
  • Identify and refine cybersecurity processes to ensure sustainment of the OE, software applications, supporting tools, and infrastructure.
  • Enhance early detection mechanisms by incorporating automated benchmarks and efficient review processes for baseline updates.
  • Develop innovative solutions for emerging cybersecurity requirements within DoD/DoN frameworks.

Qualifications

REQUIREMENTS :

Clearance :

• Must have an Active TS/SCI Clearance to start.

Education and Experience:

• Bachelors and nine (9) years or more experience;
  Masters and seven (7) years or more experience;
  PhD or JD and four (4) years or more related experience.
• 9+ years of experience in Information Assurance, Cybersecurity Engineering, or a related discipline.
• 5+ Years of hands-on experience designing, implementing, or supporting hardened IT systems in classified or high-security environments.
• Proven work with air-gap architectures, data diodes, and secure offline transfer mechanisms.
• Extensive Knowledge of RMF and ATO processes, including experience in creating, reviewing, and managing RMF documentation (SSPs, POA&Ms, Security Assessment Plans).
• Experience with DoD vulnerability scanning tools (e.g., ACAS, Nessus, SCAP) and compliance with DoD standards, such as DISA STIGs.
• Strong understanding of security baselining, secure configuration management, and continuous monitoring practices.
• Strong scripting/programming skills (Python, Bash, Power Shell, C/C++).
• Experience with hardware security modules (HSM), TPM, and PKI implementation.
• Familiarity with…