Cybersecurity Lead - ISSM

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. We bring deep expertise in engineering, securing, and deploying cutting-edge technologies that support mission-critical operations. In partnership with the Assistant Secretary of the Air Force for Acquisition, Technology, and Logistics, SAIC supports programs that unify data, sensors, mission applications, cloud-based services, and emerging AI-enabled automation. These efforts empower warfighters with a decisive edge, transforming complex, multidomain information into fast, clear, and actionable decisions when it matters most. As part of this team, you will help accelerate the integration, testing, security, and transition of new capabilities into operational use. You will work side by side with operators, engineers, Capability Providers, and government teams to ensure every delivery strengthens mission readiness. This role offers the opportunity to directly shape how the Air Force sees, decides, and acts across all domains—making a tangible and immediate impact on warfighter effectiveness.
The Cybersecurity Lead is responsible for cyber governance, acting as the senior technical and accreditation authority. This role ensures Capability Providers and Externals deliver complete, technically validated cyber artifacts and coordinates with the Infrastructure Task Order to support inclusion into the Baseline. The Cybersecurity Lead maintains all RMF/ATO packages for development, integration, and test environments, leads continuous monitoring, participates in CCB promotion decisions, and provides hands on support to Cloud and DSOP engineers. The Lead reinforces mission alignment, technical excellence, active communication, WHY based guidance, and real time vector checks.
Job Duties include:
• Embed JSIG, NIST SP 800‑53, STIG, and RMF controls into Air Force environments and capability onboarding workflows.
• Own RMF/ATO packages for Dev/Integration/Test environments; maintain SSP/POA&M/Continuous Monitoring artifacts.
• Lead cyber governance: validate CP and External cyber artifacts, ensure technical completeness, and coordinate readiness for Infrastructure TO baseline updates.
• Provide hands‑on technical support to Cloud and DSOP cyber engineers during complex tasks, troubleshooting, or environment build‑outs.
• Represent Cyber on ARB/CCB and provide cyber recommendations for environment promotion gates.
• Review and adjudicate STIG, SAST/DAST, ACAS/Nessus, and cloud/pipeline vulnerabilities; coordinate remediation across DSOPS, Platform, Cloud, CE, and CP teams.
• Identify systemic cyber gaps early and lead corrective‑action plans aligned to mission objectives.
• Ensure MLS/MILS boundary compliance and alignment with multi‑tenant security patterns.
• Mentor and develop the Cyber team; reinforce communication expectations, WHY behind requirements, active participation, vector checks, and accountability.

Required Qualifications & Experience:

• Bachelors and fourteen (14) years or more experience; Masters and twelve (12) years or more experience; PhD or JD and nine (9) years or more experience.
• Expert knowledge of RMF and cybersecurity governance across diverse enclaves.
• Experience with Xacta, STIGs, OWASP tooling, and ACAS/Nessus vulnerability adjudication.
• DoD 8140‑aligned certifications such as CISSP, CCSP, GIAC Security Engineer (GSE), CASP+, or equivalent.

Desired Qualifications and Experience:

• Experience validating JSIG requirements and NIST SP 800‑53 controls across development, integration, and test environments.
• Background in cloud and container security.
• Prior leadership experience building, developing, and mentoring cyber teams.

Desired Skills and Certifications:

• Experience with advanced cyber assessment, scanning, and STIG automation tools.
• Familiarity with Zero Trust, MLS/MILS concepts, cross domain security, and secure cloud/container architectures.
• Strong documentation, communication, and coordination habits aligned with RMF evidence and cyber governance workflows.