Information Systems Security Officer – Level 3

CACI; Baltimore (MD); On-site; USD 109,000 - 242,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Officer to enhance the security and compliance of vital information systems. This role involves implementing and enforcing security policies, conducting risk assessments, and managing security operations to protect sensitive data. The ideal candidate will have extensive experience in IT and cybersecurity, along with a relevant degree. This position offers a unique opportunity to contribute to a dynamic environment while ensuring the integrity of critical systems. If you are passionate about security and eager to make an impact, this role is for you.

Qualifications

• 10 years of experience in IT, cybersecurity, or security authorization.
• Knowledge of security tools, hardware/software security implementation.

Responsibilities

• Maintain operational security posture of information systems.
• Evaluate security solutions and perform vulnerability assessments.

Skills

IT Security

Cybersecurity

Security Authorization

Communication Protocols

Encryption Tools

Vulnerability Assessment

Risk Assessment

Configuration Management

Education

Bachelor's degree in Computer Science

General Engineering

Cybersecurity

Tools

Security Tools

PKI

Job description

Information Systems Security Officer – Level 3

Job Category: Security
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI with Polygraph
Employee Type: Regular
Percentage of Travel Required: None

The Opportunity:

We are seeking a skilled professional to provide comprehensive support for the information assurance program of an organization, system, or enclave. This role will involve actively contributing to the proposal, coordination, implementation, and enforcement of information systems security policies, standards, and methodologies to ensure the protection of critical systems and data.

Responsibilities:

The successful candidate will be responsible for maintaining the operational security posture of information systems and programs, ensuring that all security policies, standards, and procedures are implemented and adhered to. In addition, they will assist in managing the security aspects of information systems and performing day-to-day security operations to safeguard against potential threats.

Evaluating security solutions to ensure they meet stringent security requirements for processing classified information, performing vulnerability and risk assessments to support security authorization, and managing configuration management (CM) processes for information systems security software, hardware, and firmware. The candidate will also play a key role in assessing the security impact of system changes and ensuring that all security modifications are properly documented.

The role requires preparing and reviewing critical documentation such as System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). Additionally, the candidate will support security authorization activities in alignment with the National Institute of Standards and Technology Risk Management Framework (NIST RMF).

This position offers an exciting opportunity to contribute to the security and compliance of vital information systems, ensuring they meet all security requirements and safeguard sensitive information within a complex and dynamic environment.

Qualifications:

Required:

1. Current Active TS/SCI with POLY
2. Ten (10) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required. Experience in several of the following areas is required: knowledge of current security tools, hardware/software security implementation; communication protocols; or encryption tools and techniques. Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services.
3. Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems) is required. In lieu of a Bachelor’s degree, four (4) additional years of work-related experience may be substituted.
4. DoD 8570 compliance with IAM I is required. The following certifications qualify: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP

Desired:

1. Familiarity with Network Security Services and Chief Information Security Officer processes and procedures.

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

Pay Range: The proposed salary range for this position is: $109,800 - $241,600. CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.