DoD ISSO & Cybersecurity Analyst - RMF/ATO Expert

VulnU; Alexandria (VA); On-site; USD 73,000 - 149,000; Full time

Job summary

CACI is looking for an Information Systems Security Officer (ISSO)/Cyber Security Analyst to support a DoD client. You will manage RMF artifacts, perform vulnerability assessments, and ensure compliance with STIGs and DISA standards across NIPR/SIPR environments.

You will collaborate with the ISSM and stakeholders to implement risk-based security controls, train personnel, and maintain DoD security posture. This role requires DoD Secret clearance and strong RMF experience.

Qualifications

• U.S. Citizens with an active DoD Secret clearance.
• Typically requires 2+ years of relevant experience and a B.S. in Information Technology, Information Security, or related field.
• Experience with DoD RMF, NIST Controls, and Authorization to Operate (ATO) processes.

Responsibilities

• Manage security evaluations of information systems and networks and remediation of weaknesses.
• Conduct trade-off analyses to determine optimal information security solutions.
• Maintain familiarity with Federal information security policy guidance and directives.
• Provide ongoing security training to on-site personnel.
• Ensure physical security and OPSEC compliance of computers and terminals.
• Collaborate with ISSM and stakeholders to support cybersecurity efforts across NIPR/SIPR.
• Create and manage RMF artifacts and the entire ATO lifecycle.
• Conduct vulnerability assessments and assist remediation efforts.
• Review GitHub and software vulnerability scans.
• Utilize scripting and development tools for cybersecurity reporting and compliance.

Skills

DoD RMF

NIST controls

ATO processes

DISA STIGs

SCAP

eMASS

ACAS

GitHub Security

Cloud Azure

Container tech

Education

B.S. in Information Technology/Information Security

Tools

GitHub Advanced Security

eMASS

Job description

CACI is looking for an Information Systems Security Officer (ISSO)/Cyber Security Analyst to support a DoD client. You will manage RMF artifacts, perform vulnerability assessments, and ensure compliance with STIGs and DISA standards across NIPR/SIPR environments.

You will collaborate with the ISSM and stakeholders to implement risk-based security controls, train personnel, and maintain DoD security posture. This role requires DoD Secret clearance and strong RMF experience.