Senior ISSE: Security Engineering Lead (TS/SCI)

CACI International Inc.; Chantilly, Northern (VA, KY); Hybrid; USD 121,000 - 266,000; Full time

Job summary

CACI International Inc. is seeking a Senior Staff Information Systems Security Engineer (ISSE) to serve as the security authority for mission-critical systems in Chantilly, VA. The role focuses on integrating RMF controls and achieving Authority to Operate (ATO) across cloud and on-prem environments.

You will collaborate with developers and government stakeholders to implement security by design, conduct risk assessments, and maintain continuous monitoring to protect critical infrastructure.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Active TS/SCI w/ Poly.
• DoD 8570 IAT Level II Compliance (Security+, CCNA Security, CySA+).
• Deep experience navigating RMF lifecycle to secure and maintain ATO.
• Knowledge of NIST 800-53/800-171 control sets.
• Ability to author cybersecurity policies and manage POA&Ms.

Responsibilities

• RMF & ATO Management: lead end-to-end RMF process and coordinate with cybersecurity entities.
• Security Engineering & Cloud Oversight: security-by-design reviews for cloud platforms (AWS/Azure).
• Vulnerability & Risk Mitigation: conduct inspections, manage POA&Ms, plan patches.
• Technical Compliance & Monitoring: establish continuous monitoring and brief risks to stakeholders.

Skills

RMF mastery

Security engineering

Cloud security

Vulnerability assessment

Stakeholder communication

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Nessus

Splunk

Anchore

Xacta

SNOW

Job description

CACI International Inc. is seeking a Senior Staff Information Systems Security Engineer (ISSE) to serve as the security authority for mission-critical systems in Chantilly, VA. The role focuses on integrating RMF controls and achieving Authority to Operate (ATO) across cloud and on-prem environments.

You will collaborate with developers and government stakeholders to implement security by design, conduct risk assessments, and maintain continuous monitoring to protect critical infrastructure.