CACI International

Information Systems Security Engineer

CACI International$75K — $158K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering, or similar
  • 5+ years of experience in Cybersecurity or Information Assurance
  • Active TS/SCI with Polygraph clearance
  • DoD 8570 IAT Level II certification (e.g., Security+, CCNA Security, or CySA+)
  • Deep expertise in Risk Management Framework (NIST 800-37)
  • Proficient in NIST 800-53/171 control implementation
  • Experience in cloud security, particularly AWS or Azure

Responsibilities

  • Lead Risk Management Framework (RMF) process and maintain Authority to Operate (ATO)
  • Review change requests and assess security impacts for cloud platforms
  • Conduct vulnerability assessments and manage Plan of Actions and Milestones (POA&Ms)
  • Establish continuous monitoring protocols for security posture evaluation
  • Brief senior stakeholders on technical risks and compliance status

Benefits

  • Comprehensive healthcare coverage
  • Retirement and financial support options
  • Wellness programs and family support
  • Continuing education opportunities
  • Paid time off benefits
Full Job Description
Job Title: Information Systems Security Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

* * *


The Opportunity:
The Information Systems Security Engineer (ISSE) serves as the primary technical authority for the security and resilience of our mission-critical systems. This role is responsible for integrating security engineering principles into every phase of the Software Development Life Cycle to design and maintain secure architectures. You will collaborate with software developers, systems engineers, and government stakeholders to navigate the Risk Management Framework (RMF) lifecycle and maintain the Authority to Operate (ATO) for complex cloud and on-premise environments.

Responsibilities:

  • RMF & ATO Management: Lead the end-to-end Risk Management Framework (RMF) process, managing NIST 800-53/171 control sets and coordinating with cybersecurity entities (SCA/DAO) to secure and maintain Authority to Operate (ATO).
  • Security Engineering & Cloud Oversight: Drive "security by design" by reviewing technical change requests, evaluating new technologies, and providing security oversight for cloud-based platforms (AWS/Azure).
  • Vulnerability & Risk Mitigation: Conduct system inspections and vulnerability assessments to manage POA&Ms, prioritize system patching, and ensure robust disaster recovery and contingency planning.
  • Technical Compliance & Monitoring: Establish continuous monitoring protocols to track security posture, enforce cybersecurity policies, and brief complex technical risks to senior stakeholders.



Qualifications:
Required: 

Education and Experience

  • Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related degree
  • Minimum of 5 years of progressive experience in Cybersecurity, Information Assurance, or related background.

Clearance & Certifications

  • Active TS/SCI with Polygrah
  • DoD 8570 IAT Level II Compliance (e.g., Security+, CCNA Security, or CySA+).

Risk Management & Compliance

  • Full RMF Lifecycle Mastery: Deep experience navigating the Risk Management Framework (NIST 800-37) to secure and maintain Authority to Operate (ATO).
  • Control Implementation: Expert knowledge of NIST 800-53 and 800-171 control sets, including managing control inheritance and applying overlays.
  • Governance & Documentation: Ability to author cybersecurity policies, manage POA&Ms, and develop Contingency/Disaster Recovery plans.

Engineering & Operations

  • Technical Oversight: Experience reviewing system changes for security impact and collaborating with dev teams to integrate new technologies securely.
  • Continuous Monitoring: Proficiency in conducting security inspections, audits, and vulnerability analysis to track patch effectiveness and system health.
  • Cloud Security: Functional understanding of security operations within AWS or Azure environments.

Communication & Professionalism

  • Stakeholder Engagement: Proven ability to brief complex technical risks to large groups and coordinate directly with SCAs and DAOs.
  • Resilience: Ability to manage high-pressure tasks and mission-critical deadlines both independently and in team settings.

Desired:

  • Basic understanding of the software development lifecycle
  • Experience working with governance risk and compliance tools (i.e. Xacta, SNOW, etc.)
  • Experience utilizing common industry tools (i.e. Nessus, Splunk, Anchore, etc.)
  • Active TS/SCI with Polygraph.

-


Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

$75,200-$158,100

About CACI International

CACI International Inc is a multinational professional services and information technology company. It provides services to many branches of the federal government including defense, homeland security, intelligence, and healthcare. CACI has approximately 23,000 employees worldwide. The company's mission is to provide enterprise and mission technology services and solutions that best fit the needs of its customers. CACI has been named a Fortune World's Most Admired Company, a Washington Post Top Workplace, and a Forbes Best Employer for Diversity.
Learn more about CACI International
Size
22,000 employees
Market Cap
$7.1 billion
Industry
Net Income
$374.4 million
Founded
1962
5 Year Trend
+7.3%
Revenue
$5.8 billion
NASDAQ

Similar Jobs

More Jobs at CACI International

More Information Technology Jobs

Find similar Information Systems Security Engineer jobs: