Job Title: Cyber/Information Assurance Analyst (Journeyman)
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: Top Secret
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Local
* * *
The Opportunity:
CACI is seeking a Journeyman Cyber/Information Assurance Analyst for the Global Mission Operations Support (GMOS) contract, supporting the Department of State. This role offers a unique opportunity to enhance national security through advanced IT solutions. You will collaborate with experienced professionals in an innovative environment, guiding a high-performing team to deliver excellence. The GMOS contract aims to provide world-class IT support by modernizing and maintaining applications and infrastructure using an integrated IT Service Management approach. Join us to make a meaningful impact on a program of national importance.
Responsibilities:
- Plan, implement, and monitor comprehensive security measures for the protection of computer networks, systems, and applications across the CA IT enterprise aligned with NIST Cybersecurity Framework
- Maintain and update the enterprise service catalog ensuring comprehensive security documentation for all operational services including security classifications, compliance status, and risk assessments
- Provide expert security guidance and technical consultation for infrastructure architecture initiatives, ensuring alignment with Department of State security standards, FISMA requirements, and NIST 800-53 controls
- Ensure engineering designs and technical solutions incorporate security best practices throughout the system development lifecycle, validating compliance with DOS security policies and STIGs
- Implement, configure, and validate security controls in physical data centers, virtual hosting environments, and cloud platforms including access controls, network segmentation, and encryption mechanisms
- Respond rapidly to computer security breaches, incidents, and vulnerabilities by conducting thorough investigations, performing forensic analysis, and coordinating containment and remediation activities
- Coordinate security compliance activities for network engineering services ensuring secure connectivity and encrypted communications across 350+ domestic and international facilities
- Conduct regular vulnerability assessments, security scans, and compliance audits using industry-standard tools to identify security weaknesses and generate detailed remediation recommendations
- Support Authority to Operate (ATO) processes and Risk Management Framework (RMF) activities including security control assessments and Plan of Action and Milestones (POA&M) management
- Collaborate with IT service delivery teams, infrastructure engineers, and Government security personnel to integrate security throughout IT operations and promote security-conscious culture
Qualifications:
Required:
- Bachelor's degree + 4 years of experience in related fields, such as cybersecurity, information assurance, network security, systems security engineering, or IT security operations; equivalencies considered.
- Active Top Secret Clearance
- Proven experience with information security frameworks including NIST 800-53, Risk Management Framework (RMF), FISMA compliance, and Federal security authorization processes
- Demonstrated knowledge of cybersecurity principles, security controls implementation, vulnerability management, and incident response procedures
- Strong understanding of network security technologies including firewalls, IDS/IPS, VPNs, network segmentation, and cloud security (AWS, Azure)
- Excellent analytical and problem-solving skills with experience using security assessment tools such as Nessus, Qualys, or ACAS
Desired:
- Prior experience supporting federal agencies, especially the Department of State
- Professional security certifications such as Certified Information Systems Security Professional (CISSP), CompTIA Security+, Certified Ethical Hacker (CEH), or GIAC Security Essentials (GSEC)
- Knowledge of Security Technical Implementation Guides (STIGs), CIS Benchmarks, FedRAMP authorization processes, and SIEM tools (Splunk, ArcSight, QRadar)
- Experience with DevSecOps practices
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find oppor