C

CACI

Provides government contracting technology and services

Information Systems Security Officer - Information Systems Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeReston, VA, USA$120.8k - $265.8k

About the Job

Requirements

  • A BA/BS degree and 13 or more years of relevant cybersecurity, information assurance, information systems security, or related experience; equivalencies are considered.
  • An active Secret clearance.
  • Extensive experience serving as an Information Systems Security Officer, Information Systems Security Manager, cybersecurity engineer, or equivalent security professional supporting complex enterprise IT environments.
  • Demonstrated experience implementing and maintaining cybersecurity requirements in accordance with the NIST Risk Management Framework, FISMA, NIST SP 800-53, and applicable Federal security standards.
  • Experience supporting the Assessment and Authorization lifecycle, including security controls, authorization packages, continuous monitoring, and system reauthorization.
  • Experience developing and maintaining cybersecurity documentation, including System Security Plans, Plans of Action and Milestones, risk assessments, security controls, and authorization artifacts.
  • Demonstrated experience conducting security assessments, compliance reviews, vulnerability analysis, and continuous monitoring, including tracking findings through remediation and closure.
  • Experience with enterprise vulnerability management, security monitoring, configuration compliance, and system hardening tools and practices.
  • A strong understanding of security requirements across enterprise infrastructure, including Windows/Linux, Active Directory, Exchange, network services, virtualization, hosting/cloud environments, and identity and access management.
  • Experience reviewing system architectures, engineering designs, configurations, and changes to identify cybersecurity risks and ensure security requirements are incorporated throughout the system lifecycle.
  • Experience supporting incident response, threat management, vulnerability remediation, and security escalation in coordination with technical teams and Government cybersecurity stakeholders.

Responsibilities

  • Lead comprehensive security and internal controls maintenance in accordance with Department of State policies and procedures across the CA IT enterprise supporting more than 40,000 users.
  • Maintain comprehensive security-approved thresholds for sites, ensuring enterprise compliance with Department of State security policies.
  • Lead monitoring and response to vulnerability and threat reports, coordinating remediation activities with bureaus and agencies.
  • Provide security guidance for service portfolio management, ensuring alignment with Federal accessibility standards and compliance requirements.
  • Ensure infrastructure architecture and standards development align with Department of State and Federal security requirements.
  • Ensure engineering designs for physical and virtual hosting environments incorporate security best practices and comply with Department of State security policies, FISMA requirements, and NIST standards.
  • Lead security compliance for engineering IT services, including Exchange, Active Directory, DNS, DHCP, and backup services, ensuring alignment with modern security protocols.
  • Provide security guidance for network engineering services, ensuring secure connectivity and compliance across more than 350 facilities.
  • Lead infrastructure audits, assessments, and compliance analysis, ensuring system baselines meet Department of State and DT/EA/CST security requirements.
  • Apply comprehensive knowledge across key tasks and high-impact assignments, plan and lead major technical assignments, and serve as a technical expert across multiple project assignments; may supervise others.

Desired Qualifications

  • Prior cybersecurity experience supporting Federal Government enterprise IT environments, particularly the Department of State.
  • Familiarity with Department of State cybersecurity policies, security authorization processes, and enterprise security tools.
  • Experience securing large-scale, globally distributed on-premises, virtualized, hybrid, or cloud environments.
  • Experience with ServiceNow, SIEM/SOC technologies, EDR, vulnerability management platforms, or comparable enterprise security tools.
  • Knowledge of Zero Trust Architecture principles and Federal Zero Trust requirements.
  • A relevant cybersecurity certification such as CISSP, CISM, SecurityX/CASP+, CGRC, CCSP, or equivalent.
  • ITIL 4 Foundation certification or experience supporting an ITIL-based enterprise service management environment.

About the Company

CACI

Provides government contracting technology and services

CACI International Inc. provides technology and professional services to U.S. government clients, focusing on national security and modernization. It earns most of its revenue through long-term government contracts that fund engineering, intelligence, logistics, cybersecurity, data analytics, and IT solutions for defense, intelligence, and federal civilian agencies. Its products and services work by delivering specialized technical expertise, secure systems, and mission-support capabilities that help agencies run operations more efficiently and securely. CACI differentiates itself through its deep domain knowledge in national security, a proven track record of delivering high-quality, reliable solutions, and a skilled workforce that can execute complex, long-duration contracts. The company’s goal is to be a trusted partner for government modernization needs by providing advanced technology solutions and mission support that enhance national security and operational effectiveness.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1962

Recently Posted Jobs

Explore more opportunities at CACI

See more jobs