C

CACI

Provides government contracting technology and services

Information Systems Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeSt. Louis, MO, USA$75.2k - $158.1kIn-person

About the Job

Requirements

  • An active Top Secret clearance is required, with the ability to obtain or maintain Sensitive Compartmented Information access and a polygraph.
  • A Department of Defense 8570/8140 IAM Level II certification is required, such as Security+, CySA+, CAP, or equivalent.
  • At least 3 years of experience as an Information System Security Officer or in a similar cybersecurity role supporting Department of Defense or Intelligence Community systems is required.
  • Working knowledge of the Risk Management Framework and NIST SP 800-53 controls is required.
  • Experience preparing or maintaining security authorization documentation, including System Security Plans, Plans of Action and Milestones, and contingency plans, is required.
  • Familiarity with Security Technical Implementation Guides, ACAS/Nessus scanning, and vulnerability remediation processes is required.
  • A bachelor's degree in a related field or an equivalent combination of experience and training is required.

Responsibilities

  • Serve as the Information System Security Officer for assigned information systems and act as liaison among system owners, Information System Security Managers, and the Authorizing Official.
  • Support all Risk Management Framework phases: categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
  • Prepare, update, and maintain security authorization artifacts, including System Security Plans, risk assessments, contingency plans, and Plans of Action and Milestones.
  • Conduct and support periodic security control assessments, vulnerability scans, and audits, and track remediation of findings.
  • Monitor systems for security-relevant events and respond to or report security incidents in accordance with agency policy.
  • Ensure systems comply with National Geospatial-Intelligence Agency, Department of Defense, and Intelligence Community security policies, including ICD 503, NIST SP 800-53, and CNSSI 1253.
  • Support configuration management, including reviewing proposed system changes for security impact.
  • Maintain user access controls, including account management, least privilege, and periodic access reviews.
  • Support account audits, media protection, and system hardening activities, including Security Technical Implementation Guide compliance.
  • Coordinate with the Information System Security Manager and government customer to maintain and renew system Authorizations to Operate.
  • Deliver regular status reports and briefings to program leadership and government stakeholders on the security posture of assigned systems.

Desired Qualifications

  • Experience supporting National Geospatial-Intelligence Agency or other NGA/Intelligence Community customer environments.
  • An AWS certification, such as AWS Certified Cloud Practitioner or higher, and hands-on experience securing cloud-hosted systems.
  • Experience with Momentum Financials (Unison/CGI) in a security support or system administration capacity.
  • CISSP or another Department of Defense 8570 IAM Level III certification.
  • Experience with Xacta, eMASS, or similar Risk Management Framework/governance, risk, and compliance tools.
  • Familiarity with container and cloud security practices and continuous Authorization to Operate concepts.
  • Prior experience supporting a geospatial intelligence, imagery, or mapping-related program.

About the Company

CACI

Provides government contracting technology and services

CACI International Inc. provides technology and professional services to U.S. government clients, focusing on national security and modernization. It earns most of its revenue through long-term government contracts that fund engineering, intelligence, logistics, cybersecurity, data analytics, and IT solutions for defense, intelligence, and federal civilian agencies. Its products and services work by delivering specialized technical expertise, secure systems, and mission-support capabilities that help agencies run operations more efficiently and securely. CACI differentiates itself through its deep domain knowledge in national security, a proven track record of delivering high-quality, reliable solutions, and a skilled workforce that can execute complex, long-duration contracts. The company’s goal is to be a trusted partner for government modernization needs by providing advanced technology solutions and mission support that enhance national security and operational effectiveness.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1962

Recently Posted Jobs

Explore more opportunities at CACI

See more jobs