Information System Security Engineer

CACI International Inc; Leesburg (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

CACI International Inc is seeking an experienced security professional to lead RMF and ATO activities across DoD information systems. You will mentor junior ISSOs, drive continuous monitoring strategies, and coordinate with cybersecurity architects to strengthen the program's security posture.

The role requires advanced knowledge of RMF, NIST standards, and multi-tenant environments, with a strong focus on eMASS/eMASSer tools and complex authorization processes.

Qualifications

• Active TS clearance.
• 6-9 years of RMF/GRC experience in DoD or federal environments.
• Advanced proficiency with eMASS and eMASSer.
• Deep knowledge of NIST SP 800-53r5, CNSSI 1253, and DoD RMF policy.
• Experience managing authorization boundaries for cloud or multi-tenant environments (IL2-IL6).
• Demonstrated experience mentoring junior security staff.

Responsibilities

• Lead security authorization efforts across multiple complex DoD information systems
• Serve as a technical resource and mentor for junior ISSO staff
• Drive continuous monitoring strategy and compliance posture across the program
• Operate as a key liaison between the Cybersecurity Architect and system stakeholders
• Shape RMF process improvements and authorization efficiency initiatives
• Lead SSP development, maintenance, and review across assigned system portfolios
• Manage complex POA&M portfolios and coordinate remediation with technical teams
• Lead ATO package compilation and submission processes
• Define and maintain security authorization boundaries for complex environments
• Develop and execute continuous monitoring strategies
• Leverage eMASSer for automated evidence analysis and control assessment
• Develop supply chain risk management plans and coordinate reviews
• Provide technical guidance to junior ISSOs
• Serve as primary liaison between systems teams and the Cybersecurity Architect

Skills

Security clearance

RMF/GRC experience

Education

Bachelor's degree in CS/Cybersecurity/Info Systems

Master's or PhD in related field (desired)

Tools

eMASS

eMASSer

Job description

Company Description

CACI International Inc is a Fortune 500 technology company with approximately 27,000 employees delivering mission-critical solutions to national security and government customers. The organization is recognized globally as a Fortune World's Most Admired Company, reflecting its commitment to integrity, innovation, and operational excellence. CACI provides advanced expertise and technology across defense, intelligence, and federal civilian markets, offering professionals the opportunity to work on complex, impactful challenges. The company's culture emphasizes good character, continuous improvement, and long-term career growth. CACI is an Equal Opportunity Employer, committed to fostering an inclusive, diverse, and accessible workplace for all team members.

Company Description

CACI International Inc is a Fortune 500 technology company with approximately 27,000 employees delivering mission-critical solutions to national security and government customers. The organization is recognized globally as a Fortune World's Most Admired Company, reflecting its commitment to integrity, innovation, and operational excellence. CACI provides advanced expertise and technology across defense, intelligence, and federal civilian markets, offering professionals the opportunity to work on complex, impactful challenges. The company's culture emphasizes good character, continuous improvement, and long-term career growth. CACI is an Equal Opportunity Employer, committed to fostering an inclusive, diverse, and accessible workplace for all team members.

Role Description

• Lead security authorization efforts across multiple complex DoD information systems
• Serve as a technical resource and mentor for junior ISSO staff
• Drive continuous monitoring strategy and compliance posture across the program
• Operate as a key liaison between the Cybersecurity Architect and system stakeholders
• Shape RMF process improvements and authorization efficiency initiatives

Responsibilities

• Lead SSP development, maintenance, and review across assigned system portfolios
• Manage complex POA&M portfolios and coordinate remediation with technical teams
• Lead ATO package compilation and submission processes
• Define and maintain security authorization boundaries for complex environments
• Develop and execute continuous monitoring strategies
• Leverage eMASSer for automated evidence analysis and control assessment
• Develop supply chain risk management plans and coordinate reviews
• Provide technical guidance to junior ISSOs
• Serve as primary liaison between systems teams and the Cybersecurity Architect

Qualifications

Required:

• Active TS clearance
• 6-9 years of RMF/GRC experience in DoD or federal environments
• Advanced proficiency with eMASS and eMASSer
• Deep knowledge of NIST SP 800-53r5, CNSSI 1253, and DoD RMF policy
• Experience managing authorization boundaries for cloud or multi-tenant environments (IL2-IL6)
• Demonstrated experience mentoring junior security staff

Required Certification:

• DoD 8140.03M DCWF Intermediate tier certification - one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+

Desired Certification:

• DoD 8140.03M DCWF Advanced tier certification - one of: CFR, CISA, CISM, CySA+, GPEN, or GSNA

Required Education:

• Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering

Desired Education:

• Master's or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering

Desired:

• Multiple 541 Advanced tier certifications
• Experience with IL4/IL5/IL6 system authorizations
• Familiarity with supply chain risk management frameworks (NIST SP 800-161)
• Prior experience supporting a Security Control Assessor (SCA)