Senior Cyber Engineer

SAIC•Arlington, VA

1d•Onsite

About The Position

SAIC is seeking a Sr. Cyber Engineer to join our team onsite in Arlington, VA. Responsibilities: Implement comprehensive security platform utilizing Splunk, Trellix, and Tenable vulnerability management to optimize security operations and vulnerability remediation across hybrid cloud environments Design and optimize security architecture for Azure Stack Hub (ASH), integrating security policies and compliance requirements to enable secure development environments Provide expert Assessment & Authorization (A&A) support, leveraging in-depth experience with ATO accreditation processes and actively guide the integration of technical solutions into the Risk Management Framework (RMF) Lead strategic migration of on-premise security tools to Azure cloud infrastructure, centralize security operations through unified management platforms and enhance scalability across hybrid environments Develop ITSM solutions utilizing Jira Service Management, create configuration management workflows and customer service portals to automate enterprise configuration changes and improve IT service request processing Research and develop innovative security technologies and methodologies to meet JSIG compliance standards to ensure seamless integration with classified system security requirements Design, develop, and implement comprehensive security policy, standards, and procedures for a multi-domain network supporting a highly-complex intelligence collection system Collaborate with cross-functional cyber security teams, system administrators, and engineers to seamlessly incorporate capabilities for effective risk and compliance management Employ Tenable Nessus and DISA STIG/SCAP tools to generate tailored threat reports for senior management and information system engineers to facilitate effective remediation of identified vulnerabilities Develop and optimize Splunk Security Information and Event Management (SIEM) data collection solution to detect, track, and audit various system logging data for timely response to adverse actions on the network Empower the research, development, and implementation of innovative security principles and methodologies to enhance network security posture and achieve long-term security objectives Review and adopt the Joint Special Access Program Implementation Guide (JSIG) to enhance System Security Plans (SSP), Security Test Plans (STP), Incident Response Plans (IRP), and Continuity of Operations Plans (COOP) SAIC accepts applications on an ongoing basis and there is no deadline. SAIC® is a premier Fortune 500® mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, civilian and intelligence markets includes secure high-end solutions in mission IT, enterprise IT, engineering services and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives. We are approximately 24,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.5 billion. For more information, visit saic.com . For ongoing news, please visit our newsroom .

Requirements

Bachelors degree and five (5) years' experience; additional years of experience considered in lieu of degree
Must possess an active TS/SCI; US Citizenship required
Demonstrated experience in deploying, managing, and maintaining hybrid cloud environments using Azure Stack Hub
Strong knowledge of configuring, maintaining, and utilizing Splunk for log aggregation, monitoring, and analytics
In-depth understanding and application of RMF processes, including security controls implementation, compliance, and assessment
Expertise in using tools like Tenable and Trellix to identify, prioritize, and remediate vulnerabilities while ensuring compliance with JSIG and RMF
Experience designing secure, scalable architectures for hybrid and multi-domain networks, integrating Splunk, Azure Stack Hub, and compliance frameworks such as RMF and JSIG

Responsibilities

Implement comprehensive security platform utilizing Splunk, Trellix, and Tenable vulnerability management to optimize security operations and vulnerability remediation across hybrid cloud environments
Design and optimize security architecture for Azure Stack Hub (ASH), integrating security policies and compliance requirements to enable secure development environments
Provide expert Assessment & Authorization (A&A) support, leveraging in-depth experience with ATO accreditation processes and actively guide the integration of technical solutions into the Risk Management Framework (RMF)
Lead strategic migration of on-premise security tools to Azure cloud infrastructure, centralize security operations through unified management platforms and enhance scalability across hybrid environments
Develop ITSM solutions utilizing Jira Service Management, create configuration management workflows and customer service portals to automate enterprise configuration changes and improve IT service request processing
Research and develop innovative security technologies and methodologies to meet JSIG compliance standards to ensure seamless integration with classified system security requirements
Design, develop, and implement comprehensive security policy, standards, and procedures for a multi-domain network supporting a highly-complex intelligence collection system
Collaborate with cross-functional cyber security teams, system administrators, and engineers to seamlessly incorporate capabilities for effective risk and compliance management
Employ Tenable Nessus and DISA STIG/SCAP tools to generate tailored threat reports for senior management and information system engineers to facilitate effective remediation of identified vulnerabilities
Develop and optimize Splunk Security Information and Event Management (SIEM) data collection solution to detect, track, and audit various system logging data for timely response to adverse actions on the network
Empower the research, development, and implementation of innovative security principles and methodologies to enhance network security posture and achieve long-term security objectives
Review and adopt the Joint Special Access Program Implementation Guide (JSIG) to enhance System Security Plans (SSP), Security Test Plans (STP), Incident Response Plans (IRP), and Continuity of Operations Plans (COOP)