Jefferson v. Science Applications International Corporation

CourtDistrict Court, District of Columbia
DecidedMay 6, 2025
DocketCivil Action No. 2024-1692
StatusPublished

This text of Jefferson v. Science Applications International Corporation (Jefferson v. Science Applications International Corporation) is published on Counsel Stack Legal Research, covering District Court, District of Columbia primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Jefferson v. Science Applications International Corporation, (D.D.C. 2025).

Opinion

UNITED STATES DISTRICT COURT FOR THE DISTRICT OF COLUMBIA

MARSELLES JEFFERSON,

Plaintiff, Civil Action No. 24-1692 (SLS) v. Judge Sparkle L. Sooknanan SCIENCE APPLICATIONS INTERNATIONAL CORP., et al,

Defendants.

MEMORANDUM OPINION

Marselles Jefferson was employed as a cyber security professional at the Science

Applications International Corporation (SAIC) in Germany. SAIC has a federal contract through

the General Services Administration (GSA) to perform services for the United States Air Force.

SAIC fired Mr. Jefferson after he raised concerns about fraud and lapses in protocol that he

observed at SAIC. He sued to challenge his termination under three federal statutes that protect

whistleblowers: the National Defense Authorization Act, the False Claims Act, and the Sarbanes-

Oxley Act. The Defendants have moved to dismiss the False Claims Act and Sarbanes-Oxley Act

claims under Federal Rule of Civil Procedure 12(b)(6). For the reasons below, the Court denies

the motion in part and grants it in part.

BACKGROUND

The Court draws the facts, accepted as true, from the Plaintiff’s Complaint. Wright v.

Eugene & Agnes E. Meyer Found., 68 F. 4th 612, 619 (D.C. Cir. 2023).

Marselles Jefferson is an American citizen with fifteen years of experience working as a

cyber security professional for United States defense contractors. See Compl. ¶¶ 3, 23, ECF. No. 1. He holds several certifications. Id. ¶ 25. In September 2019, Mr. Jefferson “began working at the

Headquarters USAFE-AFAFRICA Warfare Center (UAWC), at Einsiedlerhof Air Station,

Germany as a Cyber Security Systems Administrator for the U.S. Air Force contractor Huntington

Ingalls Industries.” Id. ¶ 27. In October 2020, SAIC, a publicly traded U.S. company headquartered

in Virginia, won a U.S. Air Force contract valued at $737 million from GSA “to implement,

integrate, and develop modeling and simulation[,] training, and analysis standards for the Air

Force, Department of Defense, and other organizations.” Id. ¶¶ 4, 29. Two months later, Mr.

Jefferson “transitioned to SAIC,” id. ¶ 30, where his primary duties included “scan[ning] UAWC’s

Information Technology systems and networks that were assigned to him for vulnerabilities and

address[ing] any required remediation, validat[ing] security control implementations, and

perform[ing] compliance suits before presenting those results to the Authorizing Official for

certification to connect to the Department of Defense network,” id. ¶ 31.

Around January 2021, Mr. Jefferson “disclosed” to Matthew Jamison, SAIC’s Program

Manager, that he spotted “deficiencies” in SAIC’s internal security control reporting. Id. ¶ 32. He

reported that the company was “using incorrect metrics” to report “material information” about

“cybersecurity risk management, strategy, and governance” to the U.S. Securities and Exchange

Commission and stockholders. Id. Around November 2021, Mr. Jefferson “sent multiple emails

detailing critical . . . issues and vulnerabilities in the IT system” to a senior engineer, copying

Mr. Jamison and other SAIC management. Id. ¶ 33. Around December 2021, “[s]till concerned

about persistent security issues,” Mr. Jefferson informed SAIC management personnel that its

“employees [were] not following government regulations” regarding the company’s IT security

controls. Id. ¶¶ 37–38. At the same time, he also notified SAIC management that its “employees

were reporting to the United States Government that SAIC . . . maintained appropriate internal

2 security controls when the company did not.” Id. In February 2022, Mr. Jefferson emailed SAIC

Program Manager Johnson to report that “SAIC was out of compliance” with the configuration of

an internal vulnerability management monitoring system on its networks. Id. ¶ 39.

In April 2022, while participating in a management meeting with U.S. Air Force personnel,

Mr. Jamison, and other SAIC management personnel, Mr. Jefferson explained that SAIC was

“making improper changes to policies . . . and committing fraud, waste, and abuse.” Id. ¶ 43. His

concerns related to “unnecessary equipment purchases” and “modifications that were made to the

Request for Services,” as well as Mr. Jefferson’s “unwillingness to take part” in “fraudulent action

and infractions against Air Force/DOD policy.” Id. ¶ 44. Mr. Jefferson “was informed that his

objections [and] concerns were detrimental to the program,” and Mr. Jamison questioned whether

Mr. Jefferson would “play ball” and be a “team player” about the issues he brought forward. Id.

¶ 45. Refusing to back down, on April 8, 2022, Mr. Jefferson sent an email to SAIC management

personnel stating that “he disagreed with their decision not to take action regarding his concerns.”

Id. ¶ 46. Mr. Jamison demanded Mr. Jefferson “recall the email,” and he “threatened” Mr. Jefferson

by asking, “Do you still want to work here?” Id. ¶ 47.

Around mid-April 2022, Mr. Johnson, a SAIC Deputy Program Manager, “suspended

[Mr.] Jefferson’s telework privileges.” Id. ¶ 48. Mr. Jefferson was also forced to take family and

medical leave rather than telework. Id. ¶ 50. In late April, Mr. Jamison and Mr. Johnson demoted

Mr. Jefferson, removing him as “Cyber Security Lead.” Id. ¶ 49. According to Mr. Jefferson, he

was removed because of “his disclosures about cyber security lapses and non-compliance with

security standards.” Id.

In mid-June, after Mr. Jefferson returned from forced leave, his “work environment became

more hostile.” Id. ¶¶ 51–53. Mr. Jefferson’s work was “discredited among other members of the

3 cyber security team,” and members would “only engage in verbal discussions about the issues he

raised and . . . not address them in writing.” Id. ¶ 53. Soon after, Mr. Jefferson’s access to the

internal vulnerability management security program was removed and his “passwords were

changed, preventing him from accessing the system.” Id. ¶ 54.

In early July 2022, Mr. Jefferson complained to “SAIC Program Director Jeffrey Burdett,

Human Resources Director Stacey Wyland, and other management personnel” that “he was being

retaliated against for raising concerns about cybersecurity deficiencies and related issues.” Id. ¶ 56.

In mid-July, Mr. Jefferson was placed on leave without pay for four weeks. Id. ¶ 57. On August 5,

2022, Mr. Jefferson “notified SAIC Executive, Human Resources, and management Personnel,

including then-CEO Nazzic Keene, that they were committing fraud against the U.S. Government

by making false claims, submitting improper security controls, and providing false information

that created risks to national security.” Id. ¶ 58. Mr. Jefferson stated that SAIC officials “knowingly

submitt[ed] insufficient security controls to the government and [committed fraud] that cost

taxpayers billions of dollars annually and . . . put[] our national security at risk.” Id. ¶ 58 (cleaned

up). “He also stated that SAIC officials ‘had consistently lied to the government.’” Id. ¶ 58. A little

over three weeks later, on August 29, 2022, SAIC terminated Mr. Jefferson. Id. ¶ 59.

PROCEDURAL HISTORY

Mr. Jefferson filed a Complaint on June 11, 2024, alleging violations of the National

Defense Authorization Act, the False Claims Act, and the Sarbanes-Oxley Act. See Compl.

¶¶ 64–88. He seeks both declaratory and injunctive relief. Id. ¶ 90.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Papasan v. Allain
478 U.S. 265 (Supreme Court, 1986)
Bell Atlantic Corp. v. Twombly
550 U.S. 544 (Supreme Court, 2007)
Ashcroft v. Iqbal
556 U.S. 662 (Supreme Court, 2009)
Al Maqaleh v. Gates
605 F.3d 84 (D.C. Circuit, 2010)
Morrison v. National Australia Bank Ltd.
561 U.S. 247 (Supreme Court, 2010)
Shekoyan, Vladmir v. Sibley Intl
409 F.3d 414 (D.C. Circuit, 2005)
Trudeau v. Federal Trade Commission
456 F.3d 178 (D.C. Circuit, 2006)
Hettinga v. United States
677 F.3d 471 (D.C. Circuit, 2012)
Charles Kowal v. MCI Communications Corporation
16 F.3d 1271 (D.C. Circuit, 1994)
Ruben Carnero v. Boston Scientific Corporation
433 F.3d 1 (First Circuit, 2005)
Sharma v. District of Columbia
791 F. Supp. 2d 207 (District of Columbia, 2011)
O'MAHONY v. Accenture Ltd.
537 F. Supp. 2d 506 (S.D. New York, 2008)
United States v. Morton
314 F. Supp. 2d 509 (D. Maryland, 2004)
Singh v. District of Columbia
55 F. Supp. 3d 55 (District of Columbia, 2014)
Ramchandra Adhikari v. Daoud & Partners, et
845 F.3d 184 (Fifth Circuit, 2017)
Omwenga v. United Nations Foundation
244 F. Supp. 3d 214 (District of Columbia, 2017)
Sylvia Singletary v. Howard University
939 F.3d 287 (D.C. Circuit, 2019)
Hicks v. Dist. of Columbia
306 F. Supp. 3d 131 (D.C. Circuit, 2018)

Cite This Page — Counsel Stack

Bluebook (online)
Jefferson v. Science Applications International Corporation, Counsel Stack Legal Research, https://law.counselstack.com/opinion/jefferson-v-science-applications-international-corporation-dcd-2025.