Cyber/Information Assurance Analyst (Journeyman)

CACI • Ashburn, VA

2d

About The Position

CACI is seeking a Journeyman Cyber/Information Assurance Analyst for the Global Mission Operations Support (GMOS) contract, supporting the Department of State. The role contributes to national security by delivering advanced IT solutions and supporting the modernization and maintenance of applications and infrastructure through an integrated IT Service Management approach.

The analyst plans and monitors security measures for the CA IT enterprise, advises on secure infrastructure design, implements and validates controls in data center, virtual, and cloud environments, and supports incident response, vulnerability management, compliance, and federal security authorization activities. The position collaborates with IT service delivery teams, infrastructure engineers, and Government security personnel to integrate security into IT operations.

Requirements

• Bachelor's degree and 4 years of experience in a related field, such as cybersecurity, information assurance, network security, systems security engineering, or IT security operations; equivalencies are considered.
• Active Top Secret clearance.
• Experience with NIST 800-53, the Risk Management Framework (RMF), FISMA compliance, and federal security authorization processes.
• Knowledge of cybersecurity principles, security control implementation, vulnerability management, and incident response procedures.
• Understanding of network security technologies, including firewalls, IDS/IPS, VPNs, network segmentation, and cloud security (AWS and Azure).
• Analytical and problem-solving skills, with experience using security assessment tools such as Nessus, Qualys, or ACAS.

Nice To Haves

• Experience supporting federal agencies, especially the Department of State.
• Professional security certifications such as CISSP, CompTIA Security+, Certified Ethical Hacker (CEH), or GIAC Security Essentials (GSEC).
• Knowledge of STIGs, CIS Benchmarks, FedRAMP authorization processes, and SIEM tools such as Splunk, ArcSight, or QRadar.
• Experience with DevSecOps practices.

Responsibilities

• Plan, implement, and monitor security measures for computer networks, systems, and applications across the CA IT enterprise in alignment with the NIST Cybersecurity Framework.
• Maintain and update the enterprise service catalog with security classifications, compliance status, and risk assessments for operational services.
• Provide security guidance and technical consultation for infrastructure architecture initiatives, aligning them with Department of State standards, FISMA requirements, and NIST 800-53 controls.
• Ensure engineering designs and technical solutions incorporate security best practices throughout the system development lifecycle and comply with Department of State security policies and STIGs.
• Implement, configure, and validate security controls in physical data centers, virtual hosting environments, and cloud platforms, including access controls, network segmentation, and encryption.
• Investigate security breaches, incidents, and vulnerabilities; perform forensic analysis; and coordinate containment and remediation.
• Coordinate security compliance for network engineering services, supporting secure connectivity and encrypted communications across more than 350 domestic and international facilities.
• Conduct vulnerability assessments, security scans, and compliance audits, and provide detailed remediation recommendations.
• Support Authority to Operate (ATO) processes and Risk Management Framework (RMF) activities, including security control assessments and Plan of Action and Milestones (POA&M) management.
• Collaborate with IT service delivery teams, infrastructure engineers, and Government security personnel to integrate security into IT operations and promote a security-conscious culture.

Benefits

• Flexible time off benefit.
• Learning resources and learning and development opportunities.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
• Competitive compensation and benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level