Information Security Analyst-Senior (RMF)

CACI; Fort Bragg (NC); On-site; USD 72,000 - 150,000; Full time

Benefits offered by this job

Healthcare

Wellness

Financial

Retirement

Family support

Continuing education

Time off benefits

Job summary

CACI is seeking a senior cybersecurity professional to strengthen RMF documentation and DoD/Intelligence Community compliance at Fort Bragg, NC. You will conduct security reviews, vulnerability assessments, and risk analyses, producing authoritative documentation such as the System Security Plan, Risk Assessment, and POA&M.

The role emphasizes discretion with classified information and requires DoD Top Secret clearance.

Qualifications

• DoD Top Secret clearance with DCID 6/4 eligibility.
• Current DoD 8570 IAT Level II certification.
• 4-6 years of cybersecurity (Info Assurance) compliance and vulnerability testing experience.
• Experience using COTS/GOTS/DoD CS Tools for security analysis and network scanning.
• Vulnerability tool administration and execution capability.
• Proficiency with MS Office products.
• Exceptional organizational, presentation, and communication skills (verbal and written).
• Experience handling and marking classified information.
• Familiarity with security policies governing storage, access, and transmittal of classified information.
• Self-starter with high productivity and ability to meet deadlines.

Responsibilities

• Manage, maintain, and review Certifications and Accreditation (C&A) documentation for supported Automated Information Systems to ensure DoD and IC RMF compliance.
• Maintain working knowledge of DoD RMF directives and Intelligence Directive 503.
• Conduct security reviews, scans, evaluations, and risk assessments to identify security risks and assess cyber vulnerabilities.
• Produce and maintain required documentation such as the System Security Plan, Risk Assessment, Plan of Action and Milestones, and Authority to Operate/Connect.
• Identify systemic security issues using analysis of vulnerability and configuration data.
• Advise on tools and processes to improve CS initiatives and align with DoD policy.
• Apply RMF requirements in day-to-day support and respond to inquiries via email, phone, or in-person.
• Demonstrate discretion when handling classified or sensitive information.
• Perform and interpret vulnerability scans and identify vulnerabilities across systems.
• Support continuous analysis to identify network and system vulnerabilities.
• Analyze security threats (e.g., buffer overflow, cross-site scripting, SQL injection) and remediation options.
• Prepare audit reports with findings and remediation strategies.
• Administer and maintain multiple vulnerability management servers/applications and RMF web database tool.

Skills

DoD Top Secret Clearance

DoD 8570 IAT II

Cybersecurity experience (4-6 yrs)

DoD CS Tools

Vulnerability tool admin

MS Office

Written and verbal communication

Handling classified information

Security policy familiarity

Self-starter / high productivity

Customer service / team player

Education

B.S./M.S. in CS/InfoSec/Math/IT

Tools

COTS/GOTS/DoD CS Tools

Job description

Step into a senior role where your expertise helps strengthen risk management across supported systems. This onsite position at Fort Bragg, NC supports DoD and Intelligence Community compliance through disciplined RMF documentation, security reviews, and vulnerability analysis. CACI emphasizes integrity, an environment of trust, and a focus on continuous growth, paired with benefits that support healthcare, financial well-being, and family needs.

What you’ll do

• Manage, maintain, and review Certifications and Accreditation (C&A) documentation for supported Automated Information Systems to ensure compliance with DoD and Intelligence Community RMF standards.
• Maintain working knowledge of DoD and related directives that govern DoD RMF and Intelligence Directive 503.
• Conduct security reviews, scans, evaluations, and risk assessments to identify security risks and assess potential impact from cyber vulnerabilities.
• Evaluate security procedures and support command users in understanding and following command cyber security policies and procedures, producing and maintaining required documentation such as the System Security Plan, Risk Assessment, Plan of Action and Milestones, and the Authority to Operate (Operate) / Authority to Connect.
• Identify systemic security issues using analysis of vulnerability and configuration data.
• Reconcile customer requirements within acceptable risk levels defined by DoD policy, command policy, and generally accepted practices, including recommendations for tools and processes to improve CS initiatives.
• Apply RMF requirements in day-to-day support, responding to inquiries from organization members via email, phone, or in-person.
• Demonstrate appropriate discretion when handling classified or sensitive information.
• Perform and interpret vulnerability scans, recognizing vulnerabilities across security systems.
• Support continuous analysis to identify network and system vulnerabilities.
• Analyze security threats and vulnerabilities, including examples such as buffer overflow, mobile code, cross-site scripting, PL/SQL and injection types, race conditions, covert channel, replay, return-oriented attacks, and malicious code.
• Prepare audit reports documenting technical and procedural findings and provide recommended remediation strategies or solutions.
• Administer, operate, and maintain multiple vulnerability management servers/applications and an RMF web database tool.

Required qualifications

• DoD Top Secret Security Clearance with DCID 6/4 eligibility
• Current DoD 8570 IAT Level II certification
• 4-6 years of cybersecurity (Information Assurance) compliance and vulnerability testing experience
• Experience using COTS/GOTS/DoD CS Tools for security analysis and network scanning
• Vulnerability tool administration and execution capability
• Proficiency with MS Office products
• Exceptional organizational, presentation, and communication skills (verbal and written)
• Strong listening and comprehension skills, with the ability to extract and articulate key concepts and requirements from discussions, documentation, and transcripts
• Experience with handling and marking classified information
• Familiarity with security policies governing storage, access, and transmittal of classified information
• Self-starter who is self-managed, responsive, and dedicated, with a track record of high productivity and meeting deadlines
• Customer service and team player skills
• Ability to maintain initiative, think creatively, and develop innovative methods to solve challenging problems with available manpower and tools
• Ability to adapt with a positive attitude in a fast-paced environment and work cooperatively at multiple organizational levels

Technology and knowledge areas

• Risk Management Framework (RMF)
• Intelligence Directive 503
• PL/SQL, cross-site scripting
• Vulnerability and security scanning; server administration and systems engineering concepts
• RMF web database tool
• Security and system lifecycle management principles, including software security and usability
• COTS/GOTS/DoD CS Tools
• MS Office

Salary, location, and travel

Location: Fort Bragg, NC (onsite)

Salary: $71,500 - $150,200 per year

Travel: Up to 10% (continental US)

Benefits

• Healthcare
• Wellness
• Financial
• Retirement
• Family support
• Continuing education
• Time off benefits

Desired background

• Military background and experience with SOF
• Application security
• Software programming experienceCurrent DoD 8570 IAT Level III certification
• B.S. or M.S. in Computer Science, Information Security, Mathematics, or IT related field

Additional opportunity highlights: This role centers on maintaining and reviewing RMF-related Certifications and Accreditation documentation, aligning with DoD and Intelligence Community standards while supporting security reviews, scans, evaluations, and risk assessments.