Principal Cyber Engineer Job Listing at SAIC in Colorado Springs, CO (Job ID 2414613)

Description

Description

SAIC is seeking qualified applicants for RMF Engineer/ISSM (Information Systems Security Manager) to provide Risk Management Framework (RMF) in support the North American Aerospace Defense Command/United States Northern Command (N&NC) Information Technology (IT) Enterprise Services (NITES) contract, with primary work onsite in Colorado Springs.

The candidate selected for this position:

• Oversees system registration and record within eMASS to support the Risk Management Framework (RMF) process and authorization for N&NC Enterprise to ensure compliance and mitigate risk
• Assure standards consistent to meet and exceed standards to minimize risks and remain Cyber Operational Readiness Assessment (CORA) ready status
• Manage continious Cyber Security posture of enterprise systems and identify mitigations to meet DoDD 85001, DoDI 85002, DoDI 851001, DoD 857001-M, and NIST SP800-53.
• Understands scans from ACAS, SCAP, and/or other approved tools to determine security posture of systems to develop/maintain Authority to Operate (ATO) for systems and enclaves
• Refine the determination of the system categorization is accordance with CNSSI 1253 in areas of Confidentiality, Integrity, and Availability as information types and system interconnections change
• Manage development/maintenance of Security Plans, ensuring proper Security Technical Implementation Guides (STIGs) are applied for each system and enclave
• Ensure that all findings are properly documented in the Plan of Action and Milestones (POA&M) on an on-going basis
• Create and refine correct policies, procedures, and artifacts necessary to ensure controls are met

Qualifications

Qualifications

Required:

• IAM Level III certification required per DoD 8570, current CISSP, CISM, or GSLC certification
• BS or equivalent work experience in the Information Assurance / Cybersecurity field
• 8+ years of overall IT security experience
• 2+ years of experience as a primary ISSO or security compliance lead for an IT system
• Direct experience in RMF artifacts and eMass tracking of records
• Experience creating, tracking, and completion of Plans of Action and Milestones (POA&Ms) for resolving security control deficiencies
• TS/SCI security clearance
• Guide working groups and teams for Milestone Reviews, Configuration Management, etc
• Prepare/conduct cybersecurity presentations and make cybersecurity risk recommendations
• Provide status updates to System Owners and leadership
• Provide monthly status report to reflect the activities accomplished, issues, and path forward

Desired:

• Security Information and Event Management (SIEM) Experience
• Ability to work in a team focused, dynamic environment
• Cross Domain Solutions Certification Experience
• Must be flexible, independent, and self-motivated
• Must be punctual with regular and consistent attendance

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.

 Apply on company website