Information Security Analyst-Senior (RMF)

CACI International; North Carolina; On-site; USD 72,000 - 150,000; Full time

Job summary

CACI International is seeking an Information Security Analyst-Senior (RMF) for Ft. Liberty, NC. The role focuses on managing certifications, conducting security reviews and risk assessments to protect DoD and IC information systems.

You will prepare System Security Plans, Risk Assessments, Plans of Actions and Milestones, and Authority to Operate. A TS/SCI clearance and 8570 IAT II are required, with 4–6 years of cybersecurity experience.

Qualifications

• Knowledge of RMF requirements and DoD directives.
• Experience with vulnerability scanning and risk assessments.
• Familiarity with DoD CS Tools and security analysis.
• Strong written and verbal communication skills.

Responsibilities

• Identify systemic security issues from vulnerability data.
• Reconcile requirements with DoD policies and recommended tools.
• Respond to inquiries via email/phone/in person.
• Prepare audit reports with remediation strategies.
• Maintain RMF artifacts and security documentation.

Skills

RMF knowledge

Vulnerability scanning

Security policies

Risk assessment

DoD CS Tools

Education

DoD 8570 IAT II

B.S./M.S. in computer science or IT field

Tools

RMF web database tool

Vulnerability management servers

COTS/GOTS/DOD CS Tools

Job description

Job Title: Information Security Analyst-Senior (RMF)

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

CACI has an exciting job opportunity for a Cyber Security Control Assessor at an exciting client located at Ft. Liberty, NC.

The Opportunity:

Manages, maintains and reviews Certifications and Accreditation documents for supported Automated Information Systems to ensure compliance with DoD and Intelligence Community Risk Management Framework (RMF) standards. Maintains comprehensive knowledge of DoD and other associated directives that govern DoD RMF and Intelligence Directive 503. Conducts security reviews, scans, evaluations and risk assessments to identify security risks and impact of potential Cyber vulnerabilities. Evaluates security procedures to implement and ensures potential users are aware of and comply with command Cyber Security policies and procedures to generate and maintain required documentation for supported information systems to include the System Security Plan, the Risk Assessment, the Plan of Action and Milestones and the Authority to Operation (Operate) or to Connect.

Responsibilities:

• Ability to identify systemic security issues based on the analysis of vulnerability and configuration data
• Reconcile customer requirements within acceptable risks determined by DOD policies, command policies and generally accepted practices. Make recommendations for tools and processes to improve CS initiatives.
• Knowledge of Risk Management Framework (RMF) requirements
• Respond to daily inquiries via email, phone, or in-person from organization members
• Demonstrate appropriate discretion when handling classified/sensitive information
• Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems
• Knowledge of new and emerging information technology (IT) and information security technologies
• Knowledge of system lifecycle management principles, including software security and usability
• Conduct continuous analysis to identify network and system vulnerabilities
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code)
• Prepare audit reports that identify technical and procedural findings, and provide recommended remediation strategies/solutions
• Knowledge of server administration and systems engineering theories, concepts, and methods
• Administer, operate, and maintain multiple vulnerability management servers/applications and RMF web database tool

Qualifications:

• A DOD Top Secret Security Clearance with DCID 6/4 eligibility
• Current DOD 8570 IAT Level II certification
• 4-6 years’ experience in Cybersecurity (Information Assurance) compliance and vulnerability testing
• Experience with COTS/GOTS/DOD CS Tools for security analysis and network scanning
• Vulnerability tool administration and execution
• Proficient with MS Office products
• Exceptional organizational, presentation and communication skills (verbal and written)
• Excellent listening and comprehension skills. Ability to extract and clearly articulate key concepts and requirements from verbal discussions, documentation and transcripts
• Familiar with handling and marking of classified information
• Familiarity with Security policies governing the storage of, access to, and transmittal, of classified information
• Must be self-starter, self-managed, responsive and dedicated, with a proven track record of exceptional performance, high productivity and meeting deadlines
• Must have customer service and team player skills
• Must maintain high levels of initiative and think outside the box
• Able to develop innovative methods to solve challenging problems with available manpower and tools
• Flexible, able to maintain a positive attitude in a fast-paced constantly changing environment
• Ability to work cooperatively and proactively with personnel at various levels within the organization

Desired:

• Military background and experience with SOF
• Application security
• Software programming experience
• Current DOD 8570 IAT III certification
• B.S. or M.S. in Computer Science, Information Security, Mathematics, or IT related field
• For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.
  

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$71,500 - $150,200

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.