C

CACI

Provides government contracting technology and services

Information System Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeAnnapolis Junction, MD, USA$86.6k - $181.8kIn-person

About the Job

Requirements

  • High school diploma or GED with a minimum of 6 years of relevant experience, or a bachelor's degree with a minimum of 2 years of relevant experience.
  • Active TS/SCI with polygraph.
  • Information Assurance Technical (IAT) Level II certification (CompTIA Security+ CE).
  • CompTIA A+ CE certification.
  • CompTIA Network+ CE certification.
  • Knowledge of Department of Defense cybersecurity policies, Risk Management Framework processes, and Assessment and Authorization requirements.
  • Experience supporting cybersecurity compliance, vulnerability management, system security documentation, and risk mitigation.
  • Familiarity with ACAS/Nessus, STIG assessments, Plans of Action and Milestones, System Security Plans, and continuous monitoring processes.
  • Knowledge of configuration management, security patching, and information system security controls.
  • Strong written and verbal communication, organizational, and interpersonal skills, with the ability to communicate technical information to diverse audiences.

Responsibilities

  • Support the Information Systems Security Manager in maintaining the operational cybersecurity posture of assigned information systems, programs, and enclaves.
  • Provide cybersecurity oversight and support for Assessment and Authorization activities in accordance with FISMA, Department of Defense requirements, and the Risk Management Framework.
  • Develop, review, and maintain System Security Plans, security authorization packages, and supporting documentation required to obtain and maintain Authorities to Operate.
  • Review authorization packages for completeness, including Control Correlation Identifiers, Security Control Assessor–Validator results, Security Technical Implementation Guides, Plans of Action and Milestones, and cybersecurity strategies.
  • Conduct vulnerability assessments using ACAS, Nessus, and other approved security scanning tools to identify risks and recommend remediation.
  • Perform Security Technical Implementation Guide assessments, monitor Information Assurance Vulnerability Management compliance, and track corrective actions through completion.
  • Maintain configuration management records for security software, hardware, firmware, servers, workstations, and network infrastructure.
  • Coordinate security patches, system upgrades, and configuration changes to maintain system security and compliance.
  • Develop and maintain cybersecurity documentation, including system architecture, security boundaries, hardware and software inventories, data flows, Ports, Protocols, and Services Management records, and risk assessments.
  • Evaluate applications, infrastructure, enclaves, and enterprise environments to identify cybersecurity risks and assess proposed accreditation boundaries.
  • Implement and enforce cybersecurity policies, standards, and Standard Operating Procedures.
  • Track and report security authorization statuses, vulnerabilities, compliance findings, and remediation progress.
  • Communicate technical cybersecurity findings and recommendations to technical and nontechnical stakeholders.

Desired Qualifications

  • Experience independently managing complex Authority to Operate submissions and coordinating with Security Control Assessors and Authorizing Officials.
  • Experience supporting multiple interconnected systems or enterprise-level cybersecurity environments.
  • Experience leading cybersecurity readiness reviews, compliance inspections, or security audits.
  • Advanced proficiency in analyzing vulnerability trends and developing long-term cybersecurity improvement strategies.
  • Experience collaborating with cross-functional engineering, infrastructure, and program management teams to resolve complex security challenges.

About the Company

CACI

Provides government contracting technology and services

CACI International Inc. provides technology and professional services to U.S. government clients, focusing on national security and modernization. It earns most of its revenue through long-term government contracts that fund engineering, intelligence, logistics, cybersecurity, data analytics, and IT solutions for defense, intelligence, and federal civilian agencies. Its products and services work by delivering specialized technical expertise, secure systems, and mission-support capabilities that help agencies run operations more efficiently and securely. CACI differentiates itself through its deep domain knowledge in national security, a proven track record of delivering high-quality, reliable solutions, and a skilled workforce that can execute complex, long-duration contracts. The company’s goal is to be a trusted partner for government modernization needs by providing advanced technology solutions and mission support that enhance national security and operational effectiveness.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1962

Recently Posted Jobs

Explore more opportunities at CACI

See more jobs