Responsibilities

Depending on experience and level, responsibilities may include:

• Implement, maintain, and assess cybersecurity controls across enterprise IT systems, cloud environments, applications, and network infrastructure.

• Support Risk Management Framework (RMF) activities throughout the system lifecycle, including authorization packages, security documentation, assessments, and continuous monitoring.

• Develop, review, and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), security policies, procedures, and supporting documentation.

• Conduct security assessments, vulnerability analysis, compliance reviews, and risk assessments to identify and mitigate cybersecurity threats.

• Coordinate vulnerability remediation efforts with engineering and operations teams while tracking corrective actions to completion.

• Monitor enterprise security posture using cybersecurity tools, vulnerability scanners, endpoint protection platforms, and security monitoring solutions.

• Support security accreditation activities, audits, inspections, and compliance reporting.

• Evaluate proposed system changes to determine security impacts and recommend appropriate safeguards.

• Participate in incident response activities, forensic support, root cause analysis, and lessons learned documentation.

• Collaborate with system administrators, network engineers, cloud engineers, software developers, and Government stakeholders to integrate cybersecurity throughout system design and operations.

• Support implementation of Zero Trust principles, cloud security best practices, identity and access management, encryption, and secure configuration standards.

• Develop security metrics, dashboards, and reports to communicate cybersecurity performance and risk.

• Senior-level professionals may lead cybersecurity engineering efforts, oversee RMF activities, serve as Information System Security Officers (ISSOs), mentor junior staff, and advise Government leadership on enterprise cybersecurity strategy and compliance.

Required Qualifications

Qualifications vary based on position level.

• High School diploma with relevant experience or bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or a related technical discipline.

• Active Secret Clearance

• Experience supporting cybersecurity, information assurance, system security engineering, network security, or information systems security.

• Knowledge of cybersecurity principles, risk management, security controls, and secure system design.

• Familiarity with vulnerability management, security monitoring, and cybersecurity best practices.

• Experience developing technical documentation and communicating cybersecurity risks to technical and non-technical stakeholders.

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent written and verbal communication skills.

• Ability to obtain and maintain any required Government security clearance.

Desired Qualifications

• Experience supporting Federal Government or Department of State cybersecurity programs.

• Experience serving as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM).

• Experience implementing the NIST Risk Management Framework (RMF) and supporting Authority to Operate (ATO) processes.

• Familiarity with NIST SP 800-53, NIST SP 800-171, FISMA, FedRAMP, and other Federal cybersecurity standards.

• Experience with vulnerability management tools such as Tenable Nessus, Tenable Security Center, Qualys, or similar platforms.

• Experience using security information and event management (SIEM) tools such as Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, or Microsoft Defender XDR.

• Knowledge of cloud security technologies supporting Microsoft Azure, AWS, or Google Cloud Platform (GCP).

• Experience supporting endpoint security, identity and access management (IAM), multi-factor authentication (MFA), PKI, and privileged access management (PAM).

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is: