SAIC
Senior Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About SAIC
Science Applications International Corporation (SAIC) is a prominent technology integrator and government services provider based in Reston, Virginia. Founded in 1969, SAIC has evolved into a Fortune 500 company with annual revenues of approximately $7.5–8 billion and a workforce of over 25,000 employees. The company initially focused on scientific projects for the U.S. military and has since expanded its expertise to serve a wide range of defense, intelligence, space, and civilian agencies. SAIC offers a diverse array of services, including strategic consulting, systems engineering, logistics support, operational mission support, and advanced IT solutions such as cloud computing and cybersecurity. The company primarily serves U.S. government clients, including the Department of Defense, intelligence agencies, and civilian government organizations, while also engaging in select commercial projects. SAIC is known for its employee ownership model, which promotes innovation and accountability among its workforce, aligning their interests with the company's success.
Security at SAIC
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“SAIC's stated AppSec mission is that "U.S. government cybersecurity postures depend on SAIC solutions and support". Information regarding developer enablement versus gatekeeping, risk philosophy, and stated pain points or goals is not publicly available. Public SAIC pages emphasize enterprise cybersecurity services and 24/7 CSOC capabilities, but do not publish AppSec-specific mission statements or developer-collaboration language.”
Security Team
The SAIC Security team is comprised of "Facility Security Officers (FSOs), Program Security Officers (PSOs), and Subject Matter Experts (SMEs)". This describes corporate/program security functional roles but does not provide an AppSec-specific organizational model or reporting chain. Key public-facing AppSec leaders and team size estimates are not publicly available. No AppSec-labeled job postings were found, though broader cyber/security job counts include "Cyber 30"and "United States 67"in the security-software category. Common skill patterns from job postings include "vulnerability management tools (ACAS, Nessus, HBSS, Splunk, etc.)".
Key Initiatives
No evidence was found for a Security Champions Program. SAIC focuses on "DevSecOps and Zero Trust", but specific pre-commit, IDE, or CI/CD security actions are not publicly detailed. The vulnerability management process includes "vulnerability and penetration testing"and "1 million-plus vulnerability scans", but triage and remediation details are not publicly available. Secure SDLC artifacts are also not publicly available. Recent initiatives include Cloud One (older than 8 months), where SAIC delivers "tailored architecture, migration, and integration services", and a cloud-native CNAPP product, which is "SAIC's purpose-built Enterprise Cloud Security Operations solution leveraging Orca Security."
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.