Cyber Security Analyst

Cyber Security Analyst

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:
CACI is seeking a Cyber Security Analyst As a member of the security team, you’ll assist in the identification and implementation of information assurance/cybersecurity requirements. The successful candidate must have experience with NIST RMF,  threat analysis, vulnerability management, as well as accreditation and authorization processes and shepherding projects through to ATO approval. Our CACI cybersecurity teams use proven solutions to manage, monitor, and immediately respond to cyber threats. Capabilities include cyber assessments, event monitoring and incident response, and assist in the implementation of preventative measures to isolate and mitigate cyber threats


Responsibilities:

You will be responsible for assessing technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.

• Assist in the approach for delivering and maintaining security compliant systems in accordance with DoD cybersecurity requirements.

• Oversee security control implementation methodologies in the A&A process.

• Fully support the Risk Management Framework process end-to-end, and own the book of artifacts to include thorough documentation.

• Support development and assembly of A&A documentation such as  System  Security Plans, Security Assessment Plans, Contingency Plans, and Risk Assessment Plan.

• Brief stakeholders on the strategic plans and implementation of the RMF and cybersecurity policies and procedures.

• Review the program’s cybersecurity processes and security control implementations.

• Analyze vulnerability scan reports, assess security threats, and assist team members in developing and tracking remediation strategies.

• Support with vulnerability management and provide updates on remediation activities.

• Assist with contingency planning and incident response training and exercises.

• Review DoD Information Assurance Vulnerability Management (IAVM) alerts and work with engineers, administrators, and developers to remediate identified issues.

• Communicate security regulations, policies, and requirements to ensure compliance.

• Ensure teams comply with security and privacy awareness training requirements.

Qualifications:

Required: 

• 10+ year of demonstrated experience in the application of NIST RMF guidance, DISA STIGs, Privacy Act, or DoD regulations, instructions, manuals, checklists and guides for cybersecurity.

• Experience writing and reviewing RMF artifacts.

• Understanding of information and networking security requirements for Federal government, Department of Defense, or intelligence community. Experience using SonarQube, JFrog XRAY, eMASS, ACAS, WebInspect, Nessus, Static Code Analysis, Burp Suite or similar tools.

• Experience performing vulnerability management activities including analysis, preparing recommendations, or remediation.

• Must be detailed-oriented, exercise sound judgment, able to review the work of others, and be able to detect errors or needed modifications.

• Must possess excellent oral and written communications skills with ability to communicate in a clear and concise manner to both technical and nontechnical audiences.

• Monitoring and testing of IT systems for vulnerabilities and indicators of compromise

• Configuring or validating secure systems

• Active TS/SCI clearance with CI Poly

 

-

________________________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s mi