Cyber Security Analyst, ISSM

CACI International; Alexandria (VA); On-site; USD 104,000 - 218,000; Full time

Job summary

CACI International Inc. is seeking a Cyber Security Analyst/ISSM veteran to support JIATF-401, leading RMF activities and ATO packages for DoD information systems.

You will coordinate with multiple stakeholders to collect artifacts, maintain documentation, and ensure continuous monitoring and authorization readiness. The role emphasizes hands-on security controls review, risk identification, and collaboration across Joint and interagency partners to secure cloud, hybrid, and vendor-supported

Qualifications

• Bachelor’s degree in cybersecurity, information assurance, or related field.
• Experience with RMF and ATO for DoD information systems.
• Experience as ISSM/ISSO or cybersecurity analyst responsible for package development.

Responsibilities

• Execute day-to-day cybersecurity and RMF activities for assigned systems, including development, coordination, maintenance, and update ATO packages and supporting documentation.
• Serve as the hands-on cybersecurity practitioner for system authorization efforts, including initial authorization, reauthorization, major changes, continuous monitoring, and package maintenance.
• Coordinate with system owners, PMOs, engineers, assessors, security control providers, and vendors to collect, validate, and organize cybersecurity artifacts.
• Review and track implementation of security controls, plans of action and milestones, findings, vulnerabilities, and remediation activities.
• Support development and maintenance of required RMF documentation, including system inventories, boundary descriptions, control implementations, policies, procedures, diagrams, and supporting evidence.
• Assist with cybersecurity requirements related to cloud environments, externally hosted services, and vendor-supported systems.
• Help ensure cybersecurity considerations are integrated throughout system design, development, fielding, operation, and upgrade activities.
• Support acquisition and program documentation requirements related to cybersecurity strategies, compliance, and authorization readiness.
• Coordinate across Joint, interagency, and organizational stakeholders where differing policies or processes affect system authorization and interoperability.
• Track action items, suspense dates, dependencies, and documentation gaps to help move packages efficiently through the authorization process.
• Identify risks, gaps, and blockers early and elevate issues with clear recommendations.

Skills

RMF knowledge

ATO experience

ISSM/ISSO experience

Documentation

Education

Bachelor’s degree in cybersecurity or related field

Tools

RMF tooling

Job description

Job Title: Cyber Security Analyst, ISSMJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: RegularPercentage of Travel Required: Up to 25%Type of Travel: Local* * *The Opportunity:As a senior cybersecurity analyst supporting the Joint Interagency Task Force 401 (JIATF‑ 401), you will contribute to our team’s mission to strengthen the Department of Defense’s counter ‑ unmanned aircraft systems (C ‑ UAS) enterprise and safeguard warfighters, critical infrastructure, and the homeland. Our role is to synchronize C ‑ UAS efforts across the defense and interagency community by integrating threat intelligence, emerging technologies, testing, acquisition, and training to ensure timely and effective defense against small UAS threats. By enhancing shared awareness of friendly and adversarial drone capabilities, identifying operational gaps, and accelerating the delivery of validated counter ‑ drone solutions, JIATF ‑401 empowers commanders and mission partners with the knowledge, tools, and support needed to detect, track, and defeat hostile drones across diverse operational environments.The person in this role will serve as a Cybersecurity Analyst / Information Systems Security Manager (ISSM)-type practitioner supporting JIATF-401 in a high-tempo Joint environment. This role is for an experienced doer who can immediately execute the day-to-day cybersecurity workload associated with Risk Management Framework (RMF), Authorization to Operate (ATO) packages, system documentation, control implementation coordination, and compliance sustainment.The selected candidate must be comfortable operating independently, managing details, coordinating across many stakeholders, and pushing difficult authorization tasks to completion across cloud, hybrid, and vendor-supported systems.Responsibilities:Execute day-to-day cybersecurity and RMF activities for assigned systems, including development, coordination, maintenance, and update ATO packages and supporting documentation.Serve as the hands-on cybersecurity practitioner for system authorization efforts, including initial authorization, reauthorization, major changes, continuous monitoring, and package maintenance.Coordinate with system owners, Program Management Offices (PMOs), engineers, assessors, security control providers, and vendors to collect, validate, and organize cybersecurity artifacts.Review and track implementation of security controls, plans of action and milestones, findings, vulnerabilities, and remediation activities.Support development and maintenance of required RMF documentation, including system inventories, boundary descriptions, control implementations, policies, procedures, diagrams, and supporting evidence.Assist with cybersecurity requirements related to cloud environments, externally hosted services, and vendor-supported systems.Help ensure cybersecurity considerations are integrated throughout system design, development, fielding, operation, and upgrade activities.Support acquisition and program documentation requirements related to cybersecurity strategies, compliance, and authorization readiness.Coordinate across Joint, interagency, and organizational stakeholders where differing policies or processes affect system authorization and interoperability.Track action items, suspense dates, dependencies, and documentation gaps to help move packages efficiently through the authorization process.Identify risks, gaps, and blockers early and elevate issues with clear recommendations.Qualifications:Required:Bachelor’s degree in cybersecurity, information assurance, information systems, information technology, computer science, or a related field.Direct experience supporting RMF and ATO activities for Department of War (DoW) information systems.Practical experience in an ISSM, information system security officer (ISSO), cybersecurity analyst, or equivalent role with responsibility for package development and sustainment.Experience preparing, reviewing, and maintaining cybersecurity documentation required for authorization packages.Working knowledge of security controls, vulnerability management, Plan of Act-What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.Pay Range :There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.The proposed salary range for this position is:$103,800 - $218,100CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.