C

CACI

Provides government contracting technology and services

Information Security Analyst Senior - Risk Management Framework

Security Governance, Risk & CompliancePosted on Nov 10
Full-timeFort Liberty, NC, USA$71.5k - $150.2k

About the Job

Requirements

  • A DoD Top Secret security clearance with DCID 6/4 eligibility is required.
  • A current DoD 8570 IAT Level II certification is required.
  • Four to six years of experience in cybersecurity (Information Assurance) compliance and vulnerability testing is required.
  • Experience with commercial off-the-shelf, government off-the-shelf, and DoD cybersecurity tools for security analysis and network scanning is required.
  • Experience administering and executing vulnerability tools is required.
  • Proficiency with Microsoft Office products is required.
  • Strong organizational, presentation, and verbal and written communication skills are required.
  • Strong listening and comprehension skills, including the ability to extract and clearly articulate key concepts and requirements from discussions, documents, and transcripts, are required.
  • Familiarity with handling and marking classified information is required.
  • Familiarity with security policies governing storage, access, and transmission of classified information is required.
  • The candidate must be self-directed, responsive, dedicated, productive, and able to meet deadlines.
  • Customer service and teamwork skills are required.
  • The candidate must show initiative and be able to develop solutions to challenging problems with available staff and tools.
  • The candidate must be flexible and maintain a positive attitude in a fast-paced, changing environment.
  • The candidate must work cooperatively and proactively with personnel at various organizational levels.

Responsibilities

  • Manage, maintain, and review certification and accreditation documents for supported automated information systems to ensure compliance with DoD and Intelligence Community Risk Management Framework standards.
  • Maintain knowledge of DoD and related directives governing DoD Risk Management Framework and Intelligence Directive 503.
  • Conduct security reviews, scans, evaluations, and risk assessments to identify security risks and the impact of potential cyber vulnerabilities.
  • Evaluate security procedures, implement appropriate procedures, and ensure potential users understand and comply with command cybersecurity policies and procedures.
  • Generate and maintain required information-system documentation, including the System Security Plan, Risk Assessment, Plan of Action and Milestones, and Authority to Operate or Connect documentation.
  • Identify systemic security issues by analyzing vulnerability and configuration data.
  • Reconcile customer requirements with acceptable risks established by DoD and command policies and generally accepted practices, and recommend tools and processes to improve cybersecurity initiatives.
  • Respond to daily inquiries from organization members by email, phone, or in person.
  • Exercise appropriate discretion when handling classified or sensitive information.
  • Conduct vulnerability scans and recognize vulnerabilities in security systems.
  • Keep current with emerging information technology and information security technologies.
  • Apply system lifecycle management principles, including software security and usability.
  • Conduct ongoing analysis to identify network and system vulnerabilities.
  • Assess system and application security threats and vulnerabilities, including buffer overflows, mobile code, cross-site scripting, procedural language/structured query language injections, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.
  • Prepare audit reports documenting technical and procedural findings and recommended remediation strategies and solutions.
  • Apply server administration and systems engineering theories, concepts, and methods.
  • Administer, operate, and maintain multiple vulnerability-management servers and applications, as well as a Risk Management Framework web database tool.

Desired Qualifications

  • Military background and experience with special operations forces are preferred.
  • Application security experience is preferred.
  • Software programming experience is preferred.
  • A current DoD 8570 IAT Level III certification is preferred.
  • A Bachelor of Science or Master of Science degree in Computer Science, Information Security, Mathematics, or an IT-related field is preferred.

About the Company

CACI

Provides government contracting technology and services

CACI International Inc. provides technology and professional services to U.S. government clients, focusing on national security and modernization. It earns most of its revenue through long-term government contracts that fund engineering, intelligence, logistics, cybersecurity, data analytics, and IT solutions for defense, intelligence, and federal civilian agencies. Its products and services work by delivering specialized technical expertise, secure systems, and mission-support capabilities that help agencies run operations more efficiently and securely. CACI differentiates itself through its deep domain knowledge in national security, a proven track record of delivering high-quality, reliable solutions, and a skilled workforce that can execute complex, long-duration contracts. The company’s goal is to be a trusted partner for government modernization needs by providing advanced technology solutions and mission support that enhance national security and operational effectiveness.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1962

Recently Posted Jobs

Explore more opportunities at CACI

See more jobs