Cybersecurity Assessment Engineer

Cybersecurity Assessment Engineer

Job Category: Engineering

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

The Opportunity:

CACI is looking for a Risk Management Framework (RMF) Assessment Engineer with a strong cybersecurity background with specific experience in RMF processes and federal security standards like NIST 800-53. 

Responsibilities:

• Strong communication skills: Excellent written and verbal communication skills are necessary for collaborating with technical and non-technical stakeholders, preparing reports, and presenting technical information.
• Analytical and problem-solving skills: The ability to identify vulnerabilities, analyze risks, and propose effective mitigation strategies is critical.
• Attention to detail: Accuracy and precision are essential in documenting security controls and preparing authorization packages.
• Ability to work independently and collaboratively in a team environment. 

Qualifications:

Required:

• 5+ years in RMF/Security Engineering: Experience in mapping, implementing, interpreting, and documenting RMF security controls is crucial.
• Experience with A&A processes: Developing and submitting Authority to Operate (ATO) packages is often a requirement.
• Proficiency in eMASS: Managing the eMASS cybersecurity management tool is highly preferred.
• Bachelor's degree in a related field (e.g., Computer Science, Cybersecurity, Information Systems) is typically required, or equivalent work experience.
• Secret clearance or higher is often a requirement for jobs in the defense sector. 

Desired:

• NIST 800-53: A thorough understanding of this standard is fundamental.
• DoD cybersecurity policies and procedures: Familiarity with these is particularly valuable for positions within the defense sector.
• Security scanning tools: Experience with tools like Nessus, Tenable.sc, or Qualys is often desired.
• ACAS/SCC/ConfigOS scans: The ability to analyze these scans and controls is important for continuous system authorization.
• STIGs: Hands-on experience reviewing scan data, STIGs, and RMF controls is beneficial.
• Security engineering principles: Understanding and applying these to protect systems and networks is expected.
• Risk assessment methodologies: Expertise in these is essential for evaluating risks and developing mitigation strategies. 

Desired Certifications:

• DoD 8140 certification at IAM Level I or higher (e.g., Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA) is frequently a requirement.
• Certified RMF Professional (CRMP) is a preferred certification. 

-

________________________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

 

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

 

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

 

Your potential is limitless. So is ours.

Learn more about CACI here.

________________________________________________________________________________________

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies