Cybersecurity Team Lead
Description
SAIC is seeking an experienced Cybersecurity Engineer/Cybersecurity Team Lead to lead cybersecurity engineering, compliance, and security authorization activities for a next-generation DevSecOps, cloud, and AI-enabled platform supporting Department of Defense programs in Huntsville, AL. This role combines technical cybersecurity leadership, RMF/ATO management, eMASS documentation, and hands-on security engineering across classified and unclassified environments.
Key Responsibilities
- Lead cybersecurity team activities, establish priorities, coordinate security deliverables, and serve as a primary cybersecurity point of contact for government stakeholders, ISSMs, ISSOs, and program leadership.
- Lead the development, maintenance, and coordination of DoD RMF and ATO packages, including security assessments, continuous monitoring, authorization updates, and ongoing compliance activities.
- Manage eMASS documentation, including System Security Plans (SSPs), security control implementation statements, assessment evidence, Plans of Action and Milestones (POA&Ms), and other authorization artifacts.
- Design, implement, and maintain secure architectures for DevSecOps platforms across classified and unclassified cloud, hybrid, and containerized environments, applying DISA STIGs, NIST 800-53 controls, and Zero Trust principles.
- Secure CI/CD pipelines through automated security scanning, software supply chain protections, Policy-as-Code, compliance automation, and integration of security controls into development workflows.
- Lead vulnerability management activities using ACAS/Nessus, container scanning, and SBOM tools. Coordinate remediation, track security findings, and support incident response and continuous monitoring.
- Evaluate and securely integrate emerging technologies, including Generative AI platforms, AI-enabled development tools, and automation capabilities, ensuring alignment with DoD security and authorization requirements.
- Coordinate with DevOps, engineering, and infrastructure teams to address cybersecurity risks, implement security controls, and maintain authorization readiness across mission-critical platforms.
- Support security requirements for classified, restricted, and air-gapped environments, including approved software artifact movement and secure integration between environments.
Education Requirements
- Bachelor's degree and 5 years of relevant experience in cybersecurity engineering, information assurance, cloud security, or platform security. An additional 6 years of experience may be considered in lieu of a degree (per contract vehicle). Additional certifications may be considered in lieu of experience.
Clearance Requirements
- Must possess an active Interim Secret security clearance with the ability to obtain a Secret security clearance; U.S. Citizenship required.
Required Skills
- Experience providing cybersecurity technical leadership, coordinating security activities, and working with government cybersecurity stakeholders.
- Hands-on experience with DoD RMF, ATO package development, and eMASS documentation management.
- Strong knowledge of NIST 800-53, DISA STIGs, security control implementation, SSPs, POA&Ms, and continuous monitoring.
- Strong working knowledge of DevSecOps environments, CI/CD pipelines, and cloud or hybrid infrastructure security.
- Experience with vulnerability management, ACAS/Nessus scanning, remediation workflows, and security compliance assessments.
- Strong Linux and/or Windows security background, including system hardening and secure configurations.
- Ability to support classified systems and communicate technical security risks to engineering teams and program leadership.
Desired Skills
- Previous experience as a Cybersecurity Team Lead, ISSO, ISSM, or senior cybersecurity engineer supporting DoD authorization activities.
- Experience supporting successful ATOs, authorization renewals, or ongoing authorization processes.
- Experience with AWS GovCloud, Azure Government, Docker, Kubernetes, and cloud-native security.
- Experience implementing Policy-as-Code, Infrastructure-as-Code security, and automated compliance validation.
- Experience with software supply chain security, SBOMs, Zero Trust architectures, and AI platform security.
- Familiarity with DoD 8140/DCWF requirements and relevant certifications such as Security+, CISSP, or CGRC.
- Experience with GitLab, Azure DevOps, Terraform, Ansible, or similar automation technologies.
- Experience supporting digital engineering or MBSE platforms.