Business/Systems Analyst

CACI International Inc; Arlington (VA); On-site; USD 87,000 - 182,000; Full time

Job summary

CACl International Inc. is seeking a Business/Systems Analyst focused on application security within Momentum ERP for a DoD project. The role integrates security controls into business workflows and collaborates with product, engineering, and delivery teams through the SDLC.

You will test security aspects, identify gaps, and ensure secure handling of sensitive data while aligning with RBAC and separation of duties. On-site availability in Rosslyn, VA is expected.

Qualifications

• Four or more years of experience supporting Momentum ERP as an Application Security Analyst.
• Experience with Momentum system and application administration.
• Experience supporting cloud-hosted enterprise applications.
• Familiarity with regulated or compliance-driven environments.
• Working knowledge of security, audit, and access control best practices.
• Strong troubleshooting, analytical, and problem-solving skills.
• Active Top Secret security clearance with eligibility for SCI access and a CI polygraph.
• Willingness to work on-site in Rosslyn, VA, up to five days per week.

Responsibilities

• Manage user access requests, supporting documentation, and related processes; provision, modify, and deactivate user accounts in accordance with established cybersecurity controls and procedures.
• Maintain roles, permissions, and access profiles in alignment with RBAC and separation of duties requirements.
• Support periodic access reviews and respond to audit requests.
• Perform functional application security testing to validate authentication, authorization, session management, data handling, and business logic controls.
• Identify security gaps in application workflows, user roles, permissions, and integrations.
• Validate the secure handling of PII, financial information, and other regulated data within Momentum.
• Collaborate with stakeholders to develop and refine the ERP strategy and roadmap.
• Develop, execute, and document security test cases aligned with business scenarios.
• Incorporate security requirements into user stories, acceptance criteria, and functional designs.
• Partner with product owners, developers, and QA teams to address security requirements early in the SDLC.
• Review functional designs and configuration changes to identify security risks and recommend corrective actions.
• Support security reviews before release and participate in go-live readiness assessments.

Skills

Momentum ERP experience

Security testing

RBAC knowledge

Problem solving

Top Secret clearance

Tools

Momentum ERP

Job description

Job Title: Business/Systems Analyst

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

The Opportunity:

CACI is seeking a professional, customer-oriented Functional Application Security Analyst who can quickly learn new business processes, troubleshoot system functionality, and work independently in a fast-paced, challenging environment. If you are a Business Systems Analyst with a passion for application security, join our team!

We are supporting the implementation of Momentum, a Commercial-Off-the-Shelf (COTS) financial system, for a large, complex Department of Defense project. Our team designs and delivers innovative solutions to meet our customers’ evolving needs.

In this role, you will help integrate application security controls into business workflows and partner with product, engineering, and delivery teams throughout the software development life cycle (SDLC). Responsibilities include identifying and resolving security gaps, developing functional designs, configuring the application security model, and validating access controls and separation of duties.

As a bridge between business requirements and technical security controls, you will test application behavior from a security perspective and help teams design, configure, test, and release solutions that meet both business and security requirements.

Responsibilities:

• Manage user access requests, supporting documentation, and related processes; provision, modify, and deactivate user accounts in accordance with established cybersecurity controls and procedures.
• Maintain roles, permissions, and access profiles in alignment with role-based access control (RBAC) and separation of duties requirements.
• Support periodic access reviews and respond to audit requests.
• Perform functional application security testing to validate authentication, authorization, session management, data handling, and business logic controls.
• Identify security gaps in application workflows, user roles, permissions, and integrations.
• Validate the secure handling of personally identifiable information (PII), financial information, and other regulated data within Momentum.
• Collaborate with stakeholders to develop and refine the enterprise resource planning (ERP) strategy and roadmap.
• Develop, execute, and document security test cases aligned with business scenarios.
• Incorporate security requirements into user stories, acceptance criteria, and functional designs.
• Partner with product owners, developers, and quality assurance teams to address security requirements early in the software development life cycle.
• Review functional designs and configuration changes to identify security risks and recommend corrective actions.
• Support security reviews before release and participate in go-live readiness assessments.

Qualifications:

Required:

• Four or more years of experience supporting Momentum ERP as an Application Security Analyst.
• Experience with Momentum system and application administration.
• Experience supporting cloud-hosted enterprise applications.
• Familiarity with regulated or compliance-driven environments.
• Working knowledge of security, audit, and access control best practices.
• Strong troubleshooting, analytical, and problem-solving skills.
• Strong operational discipline and attention to detail.
• Active Top Secret security clearance with eligibility for SCI access and a counterintelligence (CI) polygraph.
• Willingness to work on-site in Rosslyn, VA, up to five days per week.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$86,600 - $181,800

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.