Information Systems Security Officer (ISSO)/Cyber Security Analyst

VulnU; Alexandria (VA); Sur place; USD 73 000 - 149 000; Plein temps

Résumé du poste

CACI is looking for an Information Systems Security Officer (ISSO)/Cyber Security Analyst to support a DoD client. You will manage RMF artifacts, perform vulnerability assessments, and ensure compliance with STIGs and DISA standards across NIPR/SIPR environments.

You will collaborate with the ISSM and stakeholders to implement risk-based security controls, train personnel, and maintain DoD security posture. This role requires DoD Secret clearance and strong RMF experience.

Qualifications

• U.S. Citizens with an active DoD Secret clearance.
• Typically requires 2+ years of relevant experience and a B.S. in Information Technology, Information Security, or related field.
• Experience with DoD RMF, NIST Controls, and Authorization to Operate (ATO) processes.

Responsabilités

• Manage security evaluations of information systems and networks and remediation of weaknesses.
• Conduct trade-off analyses to determine optimal information security solutions.
• Maintain familiarity with Federal information security policy guidance and directives.
• Provide ongoing security training to on-site personnel.
• Ensure physical security and OPSEC compliance of computers and terminals.
• Collaborate with ISSM and stakeholders to support cybersecurity efforts across NIPR/SIPR.
• Create and manage RMF artifacts and the entire ATO lifecycle.
• Conduct vulnerability assessments and assist remediation efforts.
• Review GitHub and software vulnerability scans.
• Utilize scripting and development tools for cybersecurity reporting and compliance.

Connaissances

DoD RMF

NIST controls

ATO processes

DISA STIGs

SCAP

eMASS

ACAS

GitHub Security

Cloud Azure

Container tech

Formation

B.S. in Information Technology/Information Security

Outils

GitHub Advanced Security

eMASS

Description du poste

Job Title: Information Systems Security Officer (ISSO)/Cyber Security AnalystJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local\\* \\* \\*The Opportunity:CACI is seeking a cyber security professional to join our team supporting a Department of Defense (DoD) client. In this role, you will support the DoD Risk Management Framework (RMF) process and activities to support the customer’s mission and cyber security posture for a portfolio of systems (NIPR/SIPR), sponsored by a variety of DoD customersResponsibilities:Manage extensive security evaluations of information systems and networks and the remediation of security control weaknesses, prepares evaluation reports, and presents recommendations.Conduct trade-off analyses of products for clients to determine optimal information security solutions. Maintain a high level of familiarity with the major Federal Government Information Security policy guidance and directives.Provide ongoing security training to the client's on-site personnelEnsure the physical environment of the computers and their terminals are properly secured and meets all Operation Security (OPSEC) requirementsConduct structured walk-throughs based on Continuity of Operations Plans to ensure integrity of the network’s ability to reconstitute normal system functions including reinstallation of applications after a catastrophic failureWork collaboratively with the ISSM, stakeholders, and the team to support cybersecurity efforts (NIPR/SIPR) Create and manage RMF artifacts and the entire ATO lifecycle Conduct vulnerability assessments on technologies to verify system security and compliance and assist in remediation efforts Review and analyze GitHub and software vulnerability scans Utilize scripting and development tools to achieve cybersecurity compliance and reporting needs Ensure application, system, environment, or organizational changes do not have an adverse effect on the security posture of the system security compliance and assessmentMonitor and validate vulnerability postures in Assured Compliance Assessment Solution (ACAS), and ensure all systems comply with DISA Security Technical Implementation Guidelines (STIG)s and with CSSP requirementsEnsure and approve Plan of Action and Milestones (POA&M) are in place for vulnerabilities that cannot be remedied at the time of the findingQualifications:Required: Must be a U.S. Citizen with an active DoD Secret clearance (at minimum) Typically requires at least 2 years’ experience and a B.S. in Information Technology, Information Security, or related field or equivalent professional experienceExperience and knowledge in DoD RMF, NIST Controls, and Authorization to Operate (ATO) processes Knowledge of cybersecurity concepts and tools, such as DISA STIGs, SCAP, SCC ToolMinimum 2 years’ experience using the DoD Enterprise Mission Assurance Support Service (eMASS) as a system certification and accreditation tracking tool Trained in the use of the ACAS to include how to remedy Information Assurance Vulnerability Management (IAVM) findings DoD Manual 8140.03 level Intermediate from the Foundational Qualification Options for the (541) Vulnerability Assessment Analyst work role including applicable certification(s) (e.g\\_Security )Experience with cloud implementations and environments.Desired:Familiarity with National Institute of Standards (NIST) directivesExperience implementing NIST 800-53 controls Familiarity with any of the following: FEDRAMP, DISA APL, Reciprocity, DevSecOps, SIEM, Microsoft Defender for Cloud Familiarity with RMF 2.0 and Continuous ATO Experience working with Microsoft Azure environments Experience using vulnerability assessment tools as well as analyzing and interpreting assessment results Experience in initial risk assessment activities and ability to assist Authorizing Official risk determination with risk acceptanceExperience with container technology Operational knowledge of GitHub Advanced Security scanning tools, to include reviewing results of custom software security scans This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.Pay Range:There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.The proposed salary range for this position is:$72,700 - $149,200CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.