Senior ISSE: Cloud Security & RMF Lead

CACI International; Chantilly (VA); On-site; USD 87,000 - 182,000; Full time

Benefits offered by this job

Healthcare

Wellness program

Financial benefits

Retirement plan

Family support

Continuing education

Time off benefits

Job summary

CACI International is seeking an Information Systems Security Engineer (ISSE) to serve as the primary technical authority for the security and resilience of mission-critical systems. You will integrate security engineering into the SDLC and design secure architectures for cloud and on-prem environments.

You will collaborate with software developers, systems engineers, and government stakeholders to navigate RMF, maintain ATO, and apply NIST controls, with emphasis on continuous monitoring and

Qualifications

• Bachelor’s degree in CS/IT/cybersecurity/engineering or related field.
• 5+ years of progressive cybersecurity/IA experience.
• Active TS/SCI clearance.
• DoD 8570 IAT Level II compliance (e.g., Security+, CCNA Security, or CySA+).

Responsibilities

• Lead end-to-end RMF process (NIST 800-53/171) and coordinate with SCA/DAO for ATO.
• Provide security design reviews for cloud platforms (AWS/Azure).
• Conduct vulnerability assessments and manage POA&Ms, patching, and DR/contingency planning.
• Establish continuous monitoring and brief risks to senior stakeholders.

Skills

RMF & ATO management

Security engineering

Cloud oversight

Vulnerability assessment

Continuous monitoring

Risk management

Stakeholder engagement

Education

Bachelor's degree in CS/IT/cybersecurity/engineering

Tools

Xacta

SNOW

Nessus

Splunk

Anchore

AWS

Azure

Job description

CACI International is seeking an Information Systems Security Engineer (ISSE) to serve as the primary technical authority for the security and resilience of mission-critical systems. You will integrate security engineering into the SDLC and design secure architectures for cloud and on-prem environments.

You will collaborate with software developers, systems engineers, and government stakeholders to navigate RMF, maintain ATO, and apply NIST controls, with emphasis on continuous monitoring and