Information System Security Officer (ISSO)

CACI International Inc; Maryland; On-site; USD 87,000 - 182,000; Full time

Job summary

CACI International Inc. is seeking an Information System Security Officer (ISSO) to support DoD cybersecurity operations, RMF processes, and A&A activities. The role collaborates with ISSM and technical teams to maintain security posture across mission-critical systems.

You will develop SSPs, review authorization packages, and conduct vulnerability assessments using ACAS/Nessus, STIGs, and POA&Ms. Strong communication and documentation skills are essential.

Qualifications

• Active TS/SCI w/Poly clearance is required.
• RMF processes, A&A requirements familiarity.
• Experience with vulnerability management and risk mitigation.
• Strong written and verbal communication skills for diverse audiences.

Responsibilities

• Support the ISSM to maintain operational cybersecurity posture.
• Provide oversight for A&A activities per RMF and DoD requirements.
• Develop and maintain SSPs, ATO documentation, and related artifacts.

Skills

RMF knowledge

Vulnerability management

Technical writing

Stakeholder communication

Education

Bachelor's degree or higher

Active TS/SCI w/ Poly

IAT Level II certification (Security+)

CompTIA A+ CE

CompTIA Network+ CE

Tools

ACAS

Nessus

STIG assessments

Job description

Job Title: Information System Security Officer (ISSO)Job Category: SecurityTime Type: Full timeMinimum Clearance Required to Start: TS/SCI with PolygraphEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None* * *The Opportunity:CACI is seeking an experienced Information Systems Security Officer (ISSO) to support cybersecurity operations, risk management, and compliance activities within a Department of Defense (DoD) environment.In this role, you will collaborate with the Information Systems Security Manager (ISSM) and technical teams to maintain the security posture of mission-critical information systems and support Assessment and Authorization (A&A) activities.You will apply your expertise in the Risk Management Framework (RMF), vulnerability management, and security compliance to ensure information systems meet federal and DoD cybersecurity requirements. This opportunity offers a collaborative environment focused on technical excellence, accountability, continuous improvement, and supporting critical customer missions.Responsibilities :Support the ISSM in maintaining the operational cybersecurity posture of assigned information systems, programs, and enclaves.Provide cybersecurity oversight and support for Assessment and Authorization (A&A) activities in accordance with FISMA, DoD requirements, and the Risk Management Framework (RMF).Develop, review, and maintain System Security Plans (SSPs), security authorization packages, and supporting documentation required to obtain and maintain Authorities to Operate (ATOs).Review authorization packages for completeness, including Control Correlation Identifiers (CCIs), Security Control Assessor–Validator (SCA-V) results, STIGs, POA&Ms, and cybersecurity strategies.Conduct vulnerability assessments using ACAS, Nessus, and other approved security scanning tools to identify risks and recommend remediation.Perform Security Technical Implementation Guide (STIG) assessments, monitor Information Assurance Vulnerability Management (IAVM) compliance, and track corrective actions through completion.Maintain configuration management records for security software, hardware, firmware, servers, workstations, and network infrastructure.Coordinate security patches, system upgrades, and configuration changes to maintain system security and compliance.Develop and maintain cybersecurity documentation, including system architecture, security boundaries, hardware and software inventories, data flows, Ports, Protocols, and Services Management (PPSM) records, and risk assessments.Evaluate applications, infrastructure, enclaves, and enterprise environments to identify cybersecurity risks and assess proposed accreditation boundaries.Implement and enforce cybersecurity policies, standards, and Standard Operating Procedures (SOPs).Track and report security authorization statuses, vulnerabilities, compliance findings, and remediation progress.Communicate technical cybersecurity findings and recommendations to technical and nontechnical stakeholders.Qualifications:Required:Active TS/SCI w/PolyHigh school diploma or GED with a minimum of 6 years of relevant experience, OR a bachelor's degree with a minimum of 2 years of relevant experience.Information Assurance Technical (IAT) Level II certification (CompTIA Security+ CE).CompTIA A+ CE certification.CompTIA Network+ CE certification.Knowledge of DoD cybersecurity policies, Risk Management Framework (RMF) processes, and Assessment and Authorization (A&A) requirements.Experience supporting cybersecurity compliance, vulnerability management, system security documentation, and risk mitigation.Familiarity with ACAS/Nessus, STIG assessments, Plans of Action and Milestones (POA&Ms), System Security Plans (SSPs), and continuous monitoring processes.Knowledge of configuration management, security patching, and information system security controls.Strong written and verbal communication, organizational, and interpersonal skills, with the ability to communicate technical information to diverse audiences.Desired:Experience independently managing complex ATO submissions and coordinating with Security Control Assessors (SCAs) and Authorizing Officials (AOs).Experience supporting multiple interconnected systems or enterprise-level cybersecurity environments.Experience leading cybersecurity readiness reviews, compliance inspections, or security audits.Advanced proficiency in analyzing vulnerability trends and developing long-term cybersecurity improvement strategies.Experience collaborating with cross-functional engineering, infrastructure, and program management teams to resolve complex security challenges.-What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.Pay Range :There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.The proposed salary range for this position is:$86,600 - $181,800CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.