Responsibilities:

Operate in multiple classified environments daily.

•Act as a subject matter expert on organizational Cybersecurity (CS) vulnerability assessment tools and enforce those CS policy and Standard Operating Procedures.

•Maintain IAVA/B, TASKORD, CTO compliance and report to Enterprise CS Division; must be knowledgeable of known vulnerabilities from alerts, advisories, errata, and bulletins.

•Knowledgeable of CS principles and organizational requirements that are relevant to confidentiality, integrity, availability, authentication, and non-repudiation and knowledge of information security systems engineering principles.

•Act as CS advocates collecting succinct accurate artifacts to support Directives, Policies, and SOPs established to make decisions for Risk Management (i.e. develops Security Assessment Reports).

•Experienced administering and operating ACAS vulnerability assessment tool.

•Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.

•Reconcile customer requirements within acceptable risks determined by DOD policies, command policies and generally accepted practices. Make recommendations for tools and processes to improve CS initiatives.

•Knowledge of Risk Management Framework (RMF) requirements.

•Respond to daily inquiries via email, phone, or in-person from organization members.

•Demonstrate appropriate discretion when handling classified/sensitive information.

•Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.

•Knowledge of new and emerging information technology (IT) and information security technologies.

•Knowledge of system lifecycle management principles, including software security and usability.

•Conduct continuous analysis to identify network and system vulnerabilities.

•Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).

•Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.

•Knowledge of server administration and systems engineering theories, concepts, and methods
•Administer, operate, and maintain multiple vulnerability management servers/applications and RMF web database tool.

Qualifications:
Required:
• A DOD Active TS/SCI Clearance
• 7 years’ experience in Cybersecurity (Information Assurance) compliance and vulnerability testing
• Current DOD 8570 IAT II certification
• Experience with COTS/GOTS/DOD CS Tools for security analysis and network scanning
• Vulnerability tool administration and execution
• Proficient with MS Office products
• Exceptional organizational, presentation and communication skills (verbal and written)
• Excellent listening and comprehension skills. Ability to extract and clearly articulate key concepts and requirements from verbal discussions, documentation and transcripts
• Familiar with handling and marking of classified information
•  Familiarity with Security policies government

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is: