About the role

The engineer will support active cyber defense operations and perform security vulnerability assessments within a cloud-based software factory. They will also provide security consultation to stakeholders and ensure compliance with DoD and Federal cybersecurity directives.

What they look for

Cybersecurity DoD Risk Management Framework AWS Cloud Security Vulnerability Assessment Network Security Authorization & Assessment STIGs Linux Infrastructure as Code Kubernetes Security Controls Encryption PKI Firewalls Software Integration

Requirements

Candidates must possess an active Secret clearance and a DoD 8570 IAT Level II certification. A bachelor's degree with five years of experience or a master's degree with three years of experience is required, though technical experience may be substituted for a degree.

Full description

Accelerate your career and make a difference for national security in cutting edge Cyber and Space development by helping a team of industry professionals and experts that will architect and build a cloud-based software factory in support of Space Development Agency’s Battle Management Command, Control and Communication (BMC3) Program. The system that you and your team will create will establish the capability to securely and rapidly field mission applications developed by BMC3 ecosystem participants for space vehicle platforms in support of Joint All Domain Command and Control (JADC2) objectives. This position will provide you with exposure to advanced security and automation practices, as well as the opportunity to work with highly skilled engineers and architects. Additionally, you will have the chance to mentor junior developers and leverage your leadership abilities.

SAIC is seeking a Cyber Security Software Integration Engineer to support a fast paced highly innovative SDA project with the development of a cloud-based software factory for the BMC3 program. This position is primarily remote.

Primary responsibilities include:

Key Job Functions:

Cyber Defense Operator – Supports BMC3 AppFac active cyber defense operations in DOD AWS CloudOne
Provide engineering analysis, security recommendations for design implementation/operational execution
Perform computer and/or network security vulnerability assessments to identify, evaluate and mitigate security risks, threats, and vulnerabilities utilizing SD Element
Develop the Authorization & Assessment (A&A) BoE to meet DoD and Federal directives
Monitor security audit and intrusion detection system logs for system and network anomalies
Monitor technical access control methods to ensure the operational integrity of the system and data
Achieve CtFs or ATOs across multiple government customers with minimal oversight
Conduct and manage continuous monitoring activities of assigned systems
Partner with engineers to analyze software, interpret security requirements, and plan effective control implementations
Provide outstanding customer service, policy expertise, and high-quality documentation
Serve as the primary in-person point of contact for one or more U.S. Government customers on cybersecurity and compliance requirements and questions
Perform vulnerability scans of networks to identify security vulnerabilities, provide remediation alternatives, and conduct security risk assessments to ensure compliance with corporate security policies and best practices
Provide subject matter expertise and analysis to bridge the gap between high-level security requirements and policies and ensure their integration into information technology component products and information systems through purposeful security design or configuration
Provide security consultation/guidance and engineering to PM product owners, customers, system owners, and developers, and maintain security process coordination within the Department's lifecycle management and governance process

SECONDARY :

Support the operational requirements to discern technical and administrative cybersecurity requirements and implement those requirements to meet DoD and Federal laws and directive
Assess operational requirements to discern technical and administrative A&A requirements and develop project plans/schedules
Independently interpret the findings of vulnerability scanning utilities such as ACAS (Tenable Nessus) and SCAP (STIG benchmark) and manage a Plan of Actions and Milestones (POA&M) for remediation of findings
Assist customers in identifying security solutions for the company's networks and virtual private networks, application systems, key public infrastructures, authentication, and directory services to ensure the security of the network and confidential data

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.