Information Systems Security Officer

Job Title: Information Systems Security Officer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

The Opportunity:

CACI is searching for an Information Systems Security Officer (ISSO) to support a worldwide engineering, operations, and tech refresh operations team delivering capabilities and functions for multiple Intelligence Community (IC) customers. As a team, we will be responsible for operations, future technologies, engineering and Tier 2/3 support, break/fix, and tech refresh activities to develop and maintain capabilities on a global basis.  

  

Be a part of something greater than yourself and make a lasting impact at CACI!

Responsibilities:

• Manage Risk Management Framework (RMF) process
• Work with system development team to identify needed RMF artifacts and load them into the government’s EMASS system.
• Develop security plans, policies, and designs.
• Configure and implement security solutions based upon the customer’s performance criteria and specifications
• Conduct systems pre-test and acceptance tests to validate the designed performance criteria
• Structure mock designs based upon RFP specifications in support of the Bids & Proposal teams
• Collaborate with government and /or subcontractors at customer site for security solution integration into existing infrastructure
• Develop and perform technical presentations for customers
• Mentor junior engineers and technicians
• Serve as technical lead on projects.
• Travel to other CACI Locations or Customer Sites as necessary
• Proactively ensure a safe work environment and adhere to CACI EH&S policies and procedures
• Perform other duties as required.

Qualifications:

Required:

• A Bachelors degree is required.
• Knowledge of risk assessment tools, technologies, and methods
• Experience designing secure networks, systems, and application architectures
• Experience planning, researching, and developing security policies, standards, and procedures
• Ability to communicate network security issues to peers and customers
• Working knowledge of current Cyber technologies and experience with NIST 800 Series and DoD 8570 regulations and governing DISA STIGs and/or SRGs
• Understanding of Information Assurance Vulnerability Management (IAVM) and Information Assurance Vulnerability Assessments (IAVAs)
• Prior experience with RMF controls, risk assessments, and POA&M generation.
• Strong working knowledge of Confidentiality, Integrity, and Availability (CIA) concepts, to include 2-factor authentication, Public Key encryption techniques, patch management, end-point security systems, intrusion detection, security event management and defense-in-depth.
• Well versed in DoD cyber security Assessment and Authorizations (A&A) DoD Implementation, Directives, NIST Special Publications and other government cyber security standards, policies, and directives.
• Experience with Nessus, ACAS, SCAP
• Experience completing and review DISA Security Technical Implementation Guides (STIGs)
• Experience conducting risk analysis on products and system components through review of CVEs, plugins, IAVAs
• Experience onboarding assets to centrally managed Enterprise solutions.
• Application Security Architecture and Design experience
• Security Compliance Operations and Application Security Assessment experience
• DoD 8570.01 IAT level 2 or greater cyber security certification per DoD 8570.01 (such as Security+)
• Experience designing and implementing Commercial Solutions for Classified (CSfC) Multi-Site Connectivity Capability Package desired
• Systems integration experience
• Excellent interpersonal and presentation skills
• At least five years of continuous recent experience in the field of DoD information systems security and/or cybersecurity.
• Possess an active Information Assurance Management (IAM) Level III certification.  Additional cyber and/or IT certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or CompTIA’s Advanced Security Practitioner (CASP)
• Possess