Senior RMF Cybersecurity Analyst (DoD)

CACI International Inc.; Fort Bragg (NC); On-site; USD 72,000 - 150,000; Full time

Benefits offered by this job

Flexible time off

Comprehensive benefits

Learning resources

Job summary

CACI International Inc. in Fort Bragg, NC seeks a Senior Information Security Analyst to manage RMF certifications and accreditation for DoD/IC systems. You will conduct risk assessments, prepare system security plans, and ensure RMF/DCID 6/4 compliance while handling sensitive information.

Responsibilities include vulnerability scans, remediation guidance, RMF tool administration, and coordination with stakeholders to strengthen cybersecurity posture.

Qualifications

• DOD TS/SCI clearance with DCID 6/4 eligibility.
• 4-6 years’ experience in Cybersecurity (Information Assurance) compliance and vulnerability testing.
• Experience with security analysis tools and vulnerability scanning.
• Vulnerability tool administration and execution.
• Excellent written and verbal communication skills.

Responsibilities

• Identify systemic security issues from vulnerability and configuration data.
• Reconcile customer requirements with DoD RMF policies and practices.
• Conduct security reviews and risk assessments to identify vulnerabilities and remediation.
• Prepare audit reports with findings and remediation strategies.
• Administer, operate, and maintain vulnerability management servers and RMF tools.

Skills

Top Secret clearance

IAT II

Cybersecurity

Vulnerability testing

Communication skills

Education

B.S. or M.S. in Computer Science, Information Security, Mathematics, or IT related field

Tools

COTS/GOTS/DOD CS Tools

RMF web database tools

Job description

CACI International Inc. in Fort Bragg, NC seeks a Senior Information Security Analyst to manage RMF certifications and accreditation for DoD/IC systems. You will conduct risk assessments, prepare system security plans, and ensure RMF/DCID 6/4 compliance while handling sensitive information.

Responsibilities include vulnerability scans, remediation guidance, RMF tool administration, and coordination with stakeholders to strengthen cybersecurity posture.