Information Systems Security Officer (ISSO) - Journeyman

CACI; Doral (FL); On-site; USD 75,000 - 159,000; Full time

Job summary

Une entreprise dynamique dans le domaine de la cybersécurité, CACI, recherche un Information Systems Security Officer pour rejoindre son équipe à Doral, Floride. Ce rôle crucial inclut la gestion de la cybersécurité et la responsabilité des systèmes assignés, tout en respectant les exigences de gestion des risques. Les candidats doivent posséder une certification pertinente et avoir une expérience solide dans le domaine de la cybersécurité, avec un accent sur la gestion des vulnérabilités et l'analyse des menaces.

Benefits

Healthcare benefits

Flexible time off

Continuous education support

Qualifications

• Doit posséder au moins une certification de sécurité.
• 3+ ans d'expérience en cybersécurité, en mettant l'accent sur RMF/compliance et gestion des vulnérabilités.
• Connaissance approfondie des politiques de cybersécurité du DoD.

Responsibilities

• Gérer la cybersécurité des systèmes assignés et effectuer des activités de cadre de gestion des risques.
• Analyser et diffuser des données de menaces pour améliorer la défense.
• Collaborer avec des parties prenantes sur l'état de la sécurité.

Skills

Threat Intelligence Analysis

Risk Management Framework (RMF)

Vulnerability Management

Incident Response

Policy Compliance

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science

Job description

Information Systems Security Officer (ISSO) - Journeyman

Job Category: SecurityTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local* * *

The Opportunity:
(ISSO) to join our dynamic cybersecurity team supporting the U.S. Southern Command (USSOUTHCOM) in Doral, Florida. This role aligns with the cybersecurity functions described in DoD 8140 Work Role ID 722. The successful candidate will be responsible for the cybersecurity of assigned systems/enclaves, performing Risk Management Framework (RMF) and compliance activities (e.g., eMASS, ATO support. This role is crucial for processing and disseminating threat intelligence to drive threat-based defense and for executing USSOUTHCOM's vulnerability management program, working closely with the ISSM. This position may be subject to rotating shift work as necessary to support specific mission or incident response requirements.

Responsibilities:

• Leadership & Execution: Execute key functions. Monitoring of threat data sources to maintain situational awareness (KSAT 705). Analyze and disseminate threat intelligence to enable threat-driven defense for the SOC. Oversee elements of the vulnerability management program, including tracking orders/directives and supervising corrective measures (KSAT 852, 862, 58). Manage the production and publishing of related cyber defense guidance (KSAT 706, 707)

• Risk Management Framework (RMF) & Compliance Support: Support the RMF lifecycle for assigned systems under the guidance of the ISSM. Perform compliance activities, track system status in eMASS, support assessments, and ensure POA&Ms are documented and tracked (KSAT 1016, 963, 862). Continuously validate systems against policies and regulations (KSAT 1032)

• Vulnerability Management: Track known vulnerabilities from alerts and advisories (KSAT 58). Interpret patterns of non-compliance or vulnerability trends to determine risk impact (KSAT 677). Ensure remediation plans are in place and tracked (KSAT 963)

• Threat Analysis: Maintain awareness of current and emerging cyber threats and vectors relevant to the operational environment (KSAT 967, 1159)

• Policy & Procedure Adherence: Support the creation, distribution, and maintenance of plans, instructions, and SOPs related to system security (KSAT 173, 790). Ensure procedures comply with cybersecurity policies (KSAT 947)

• Incident Response Support: Recognize potential security violations and take appropriate action to report incidents (KSAT 824). Support protective or corrective measures when incidents or vulnerabilities are discovered (KSAT 852)

• Stakeholder Collaboration & Communication: Collaborate extensively with the ISSM, SOC personnel, system administrators, and other internal/external stakeholders regarding threats, vulnerabilities, compliance status, and security improvements. Provide recommendations for tuning security controls/processes based on network analysis and findings

• Reporting: Collect and maintain data for compliance reporting (KSAT 440). Ensure necessary reporting (e.g., threat summaries, vulnerability status, compliance issues) meets requirements, potentially including JFHQ-DODIN timelines per CJCSM 6510.01B

Qualifications:
Required:

Certifications (must possess at least one):

• (ISC)² Certified in Governance, Risk and Compliance (CGRC) / Certified Authorization Professional (CAP)

• CompTIA Advanced Security Practitioner (CASP+) CE

• (ISC)² Certified Cloud Security Professional (CCSP)

• CompTIA Cloud+ CE

• (ISC)² Systems Security Certified Practitioner (SSCP)

• CompTIA Security+ CE

• GIAC Security Essentials (GSEC)

Conditional Alternative Certifications (Considered):

• (ISC)² Certified Information Systems Security Professional (CISSP)

Education & Experience:

• US citizen with active Secret security clearance, or ability to obtain Secret clearance

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems Management, or related technical field of study

• 3+ years of relevant, progressive cybersecurity experience is preferred, with a strong emphasis on RMF/compliance, vulnerability management, threat intelligence analysis, or related security operations roles

• Experience leading small teams or specific functions within a cybersecurity program is highly desirable

• Proven experience working within DoD or Federal government environments

• Expert-level knowledge of RMF, NIST SP 800 series, CNSSI 1253, and relevant DoD cybersecurity policies

• Experience with eMASS

• Strong understanding of vulnerability management lifecycle, threat intelligence concepts, incident response methodologies, and risk assessment (KSAT 108, 58, 967, 61)

• Knowledge of computer networking, operating systems, security architectures, and common vulnerabilities (KSAT 22, 1072, 1159)

• Excellent analytical, organizational, leadership, and communication skills. Ability to synthesize complex information and communicate effectively to diverse audiences

• Must be willing and able to work rotating shifts if required by specific mission needs or incident response situation

-

________________________________________________________________________________________

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Your potential is limitless.So is ours.

Learn more about CACI here.

________________________________________________________________________________________

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn morehere.

The proposed salary range for this position is:

$75,200-$158,100

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.