Senior Cybersecurity Analyst - RMF/ATO (ISSM) for DoD

CACI International Inc; Alexandria (VA); On-site; USD 104,000 - 218,000; Full time

Job summary

CACI International Inc. is seeking a Cyber Security Analyst/ISSM-type practitioner to support JIATF-401 in a high-tempo DoD environment. You will execute RMF activities, develop and sustain ATO packages, and coordinate across stakeholders to maintain compliance and readiness.

This role requires independent execution, strong documentation skills, and the ability to advance authorization efforts across cloud, hybrid, and vendor-supported systems while protecting critical DoD missions.

Qualifications

• Bachelor’s degree in cybersecurity, information assurance, information systems, information technology, computer science, or a related field.
• Direct experience supporting RMF and ATO activities for DoW information systems.
• Practical experience in an ISSM/ISSO/cybersecurity analyst role with responsibility for package development and sustainment.
• Experience preparing, reviewing, and maintaining cybersecurity documentation required for authorization packages.
• Working knowledge of security controls, vulnerability management, and Plan of Action.

Responsibilities

• Execute day-to-day cybersecurity and RMF activities for assigned systems, including development, coordination, maintenance, and update ATO packages and supporting documentation.
• Serve as hands-on cybersecurity practitioner for system authorization efforts, including initial authorization, reauthorization, major changes, continuous monitoring, and package maintenance.
• Coordinate with system owners, PMOs, engineers, assessors, security control providers, and vendors to collect, validate, and organize cybersecurity artifacts.
• Review and track implementation of security controls, POAs/Ms, findings, vulnerabilities, and remediation activities.
• Support development and maintenance of RMF documentation, including inventories, boundary descriptions, control implementations, policies, procedures, diagrams, and supporting evidence.
• Assist with cybersecurity requirements related to cloud environments, externally hosted services, and vendor-supported systems.
• Help ensure cybersecurity considerations are integrated throughout system design, development, fielding, operation, and upgrade activities.
• Support acquisition and program documentation requirements related to cybersecurity strategies, compliance, and authorization readiness.
• Coordinate across Joint, interagency, and organizational stakeholders where differing policies affect system authorization and interoperability.
• Track action items, suspense dates, dependencies, and documentation gaps to move packages efficiently through authorization.
• Identify risks, gaps, and blockers early and elevate issues with clear recommendations.

Skills

RMF experience

ISSM/ISSO experience

Documentation for authorization

Vulnerability management

Security controls

Education

Bachelor’s degree in cybersecurity or related field

Job description

CACI International Inc. is seeking a Cyber Security Analyst/ISSM-type practitioner to support JIATF-401 in a high-tempo DoD environment. You will execute RMF activities, develop and sustain ATO packages, and coordinate across stakeholders to maintain compliance and readiness.

This role requires independent execution, strong documentation skills, and the ability to advance authorization efforts across cloud, hybrid, and vendor-supported systems while protecting critical DoD missions.