Cybersecurity Engineer

Cybersecurity Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

CACI is looking for a Cybersecurity Specialist with a deep technical understanding of Cybersecurity practices, delivering secure and reliable hardware and software solutions in short sprints.  They will work as an integral part of a highly productive team of seasoned technical professionals who thrive on supporting our customer's mission and growth objectives– responsible for designing, developing, leading, and implementing secure application and infrastructure capabilities for a variety of legacy and modernized systems and applications. 

What you’ll get to do: 

Serve as a Cybersecurity Team member responsible for the Information Assurance and Security of application, database, and enterprise network services. Responsible for activities associated with delivery of Cybersecurity policy implementation and network solutions associated with customer-defined systems and software projects; basic responsibilities include: 

• Work with Cybersecurity Lead to design and implement Cybersecurity application strategy 

• Apply information security in accordance with National/DoD directives security policy including, but not limited to,  

• Assess entire system lifecycle requirements and network security impacts 

• Support creation of, and ensure approval for, Risk Management Framework (RMF) Assess and Authorize (A&A) Process for development and sustainment projects 

• Support program and customer management, and government Authorizing Official (AO) for all information security status, policies, and procedures 

• Assist government personnel in preparing and presenting Information Assurance Compliance System (IACS) packages to the Control Assessor (SCA) Assess and analyze the current threat environment 

• Enhance – Implement Cybersecurity vulnerability/A&A hardening testing 

• Optimize – Cybersecurity development environment certification 

• Architect & Engineer security – develop security goals, capabilities, controls, and architecture 

• Design & Implement security – vulnerability management, build security into development 

• Integrate & Test Security – test patches and settings, document A&A artifacts 

• Validate & Verify security – validate patch status and software control status 

• Implement security – apply patches and security settings, performance incident handling and remediation 

• Maintain security posture – audit security settings, track security training, monitor threats, track reaccreditation 

• Enable assurance for information security during all phases of agile software development and deployment 

• Create and manage Plan of Action & Milestones (POA&M) 

• Implement and validate Security Technical Implementation Guide (STIG) requirements for all development and implementation projects 

• Report and help investigate security-related incidents and security violations as requested by the Computer Security Incident Response Center (CSIRC) 

• Monitor and inspect for approved software usage and implementation of approved antivirus and other security related software