Business/Systems Analyst

CACI International•Arlington, VA

5d•$86,600 - $181,800•Onsite

About The Position

CACI is seeking a professional, customer-oriented Functional Application Security Analyst to support implementation of Momentum, a commercial-off-the-shelf financial system, for a large Department of Defense project. The role integrates application security controls into business workflows and partners with product, engineering, and delivery teams throughout the software development life cycle. The analyst identifies and resolves security gaps, develops functional designs, configures the application security model, and validates access controls and separation of duties. The position serves as a bridge between business requirements and technical security controls, testing application behavior from a security perspective and helping teams design, configure, test, and release solutions that meet business and security requirements. The position is based on-site in Rosslyn, Virginia, up to five days per week, and requires up to 10% travel within the continental United States.

Requirements

Four or more years of experience supporting Momentum ERP as an Application Security Analyst.
Experience with Momentum system and application administration.
Experience supporting cloud-hosted enterprise applications.
Familiarity with regulated or compliance-driven environments.
Working knowledge of security, audit, and access control best practices.
Strong troubleshooting, analytical, and problem-solving skills.
Strong operational discipline and attention to detail.
Active Top Secret security clearance with eligibility for SCI access and a counterintelligence (CI) polygraph.
Willingness to work on-site in Rosslyn, Virginia, up to five days per week.

Responsibilities

Manage user access requests, supporting documentation, and related processes; provision, modify, and deactivate user accounts according to established cybersecurity controls and procedures.
Maintain roles, permissions, and access profiles in accordance with role-based access control and separation-of-duties requirements.
Support periodic access reviews and respond to audit requests.
Perform functional application security testing to validate authentication, authorization, session management, data handling, and business logic controls.
Identify security gaps in application workflows, user roles, permissions, and integrations.
Validate secure handling of personally identifiable information, financial information, and other regulated data within Momentum.
Collaborate with stakeholders to develop and refine the enterprise resource planning strategy and roadmap.
Develop, execute, and document security test cases aligned with business scenarios.
Incorporate security requirements into user stories, acceptance criteria, and functional designs.
Partner with product owners, developers, and quality assurance teams to address security requirements early in the software development life cycle.
Review functional designs and configuration changes to identify security risks and recommend corrective actions.
Support security reviews before release and participate in go-live readiness assessments.