Cyber Action Officer Job Listing at SAIC in Arlington, VA (Job ID 2612150)

Description

Description

SAIC is seeking qualified applicants to support a cutting-edge data, analytics, and AI platform. Roles include managing customer relationships, service portfolio and catalog management, software engineering & development, data/AI engineering, IT systems operations, and use case intake and analytics for DoW enterprise-scale mission objectives expected in Spring/Summer 2026.  

Positions are contingent pending contract award.

A majority of the opportunities are in the Washington DC Metropolitan Area (WDCMA). Some work may be performed remotely, subject to Government approval.

Job Responsibilities:  

• Oversee cybersecurity policy compliance across all WDP cloud and security environments in accordance with Federal, DoW, and agency policies.  
• Maintain all WDP system authorizations across multiple security enclaves.  
• Apply DoW Risk Management Framework (RMF) and Zero Trust Architecture principles across the cybersecurity lifecycle.  
• Review policies, documentation, and regulations and prepare responses to RFIs.  
• Safeguard networks, systems, and digital assets through:
  • Planning
  • Implementation
  • Upgrades
  • Monitoring  
• May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure.  
• May respond to cybersecurity incidents, ensuring appropriate controls are maintained. 

Qualifications

Education and Experience: Bachelors & 9+ years of related experience, Masters & 7+ years of experience, or PhD or JD & 5+ years of experience

Certifications:

• ISC2 Certified Information Systems Security Professional (or equivalent such as GIAC Information Security Professional)

Knowledge, Skills, Abilities, and Competencies:

• Deep knowledge of Federal, DoW, and agency cybersecurity policies.  
• Skill in maintaining authorizations and security compliance across multiple enclaves.  
• Ability to apply RMF and Zero Trust Architecture concepts.  
• Competency in reviewing cybersecurity documentation, policies, and regulations.  
• Competency in incident response and safeguarding digital assets.
• Competencies with the National Initiative for Cybersecurity Education (NICE) Framework:
  • Perform Cybersecurity Defense Analysis
  • Conduct Incident Response
  • Conduct Threat Analysis and Exploitation Analysis
  • Conduct Cyber Investigations
• Knowledge of Identity and Access Management operations.  
• Skills to use COTS/GOTS applications, ticketing systems, lab systems, forensic applications, and/or custom TTPs to:
  • Monitor systems for abnormal events
  • Determine if events are to be deemed an incident
  • Determine if incidents are due to malicious or nefarious actions
  • Determine appropriate levels of response
• Ability to integrate Security Technical Implementation Guide (STIG) updates and Cyber Vulnerabilities and Exposures (CVEs) into Change Management structure for implementation