Information Systems Security Officer, Senior
CACI International IncAbout the role
The Opportunity:
CACI is seeking a highly experienced and proactive Senior Information Systems Security Officer (ISSO) to join our dynamic cybersecurity team supporting U.S. Southern Command (USSOUTHCOM) in Doral, Florida. This role aligns with the cybersecurity functions described in DoD 8140 Work Role ID 722 at the Advanced Level. The successful candidate will be responsible for the cybersecurity of assigned systems/enclaves, performing Risk Management Framework (RMF) and compliance activities (e.g., eMASS, ATO support. This role is crucial for processing and disseminating threat intelligence to drive threat-based defense and for executing USSOUTHCOM's vulnerability management program, working closely with the ISSM. In addition, this position may be subject to rotating shift work as necessary to support specific mission or incident response requirements.
This position is contingent upon award of the USSOUTHCOM Cyber Information Technology Enterprise Services (SCITES) contract.
Responsibilities:
As an Information Systems Security Officer (ISSO), you will perform a hybrid role encompassing compliance and operational security leadership, including but not limited to:
Leadership & Execution: Lead and execute key functions. Manage the monitoring of threat data sources to maintain situational awareness (KSAT 705). Analyze and disseminate threat intelligence to enable threat-driven defense for the SOC. Oversee elements of the vulnerability management program, including tracking orders/directives and supervising corrective measures (KSAT 852, 862, 58). Manage the production and publishing of related cyber defense guidance (KSAT 706, 707).
Risk Management Framework (RMF) & Compliance Support: Support the RMF lifecycle for assigned systems under the guidance of the ISSM. Perform compliance activities, track system status in eMASS, support assessments, and ensure POA&Ms are documented and tracked (KSAT 1016, 963, 862). Continuously validate systems against policies and regulations (KSAT 1032).
Vulnerability Management: Track known vulnerabilities from alerts and advisories (KSAT 58). Interpret patterns of non-compliance or vulnerability trends to determine risk impact (KSAT 677). Ensure remediation plans are in place and tracked (KSAT 963).
Threat Analysis: Maintain awareness of current and emerging cyber threats and vectors relevant to the operational environment (KSAT 967, 1159).
Policy & Procedure Adherence: Support the creation, distribution, and maintenance of plans, instructions, and SOPs related to system security (KSAT 173, 790). Ensure procedures comply with cybersecurity policies (KSAT 947).
Incident Response Support: Recognize potential security violations and take appropriate action to report incidents (KSAT 824). Support protective or corrective measures when incidents or vulnerabilities are discovered (KSAT 852).
Stakeholder Collaboration & Communication: Collaborate extensively with the ISSM, SOC personnel, system administrators, and other internal/external stakeholders regarding threats, vulnerabilities, compliance status, and security improvements. Provide recommendations for tuning security controls/processes based on network analysis and findings.
Reporting: Collect and maintain data for compliance reporting (KSAT 440). Ensure necessary reporting (e.g., threat summaries, vulnerability status, compliance issues) meets requirements, potentially including JFHQ-DODIN timelines per CJCSM
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s