Cyber/Information Assurance Analyst (Journeyman)

CACI International • Ashburn, VA

4d • $86,600 - $181,800

About The Position

CACI is seeking a Journeyman Cyber/Information Assurance Analyst for the Global Mission Operations Support (GMOS) contract, supporting the Department of State. The position supports national security through IT solutions and contributes to modernizing and maintaining applications and infrastructure using an integrated IT Service Management approach. The analyst plans and monitors security measures across the CA IT enterprise, advises on secure infrastructure architecture, integrates security throughout the system development lifecycle, and supports security operations, compliance, and risk management.

Requirements

• Bachelor's degree and 4 years of experience in a related field, such as cybersecurity, information assurance, network security, systems security engineering, or IT security operations; equivalencies considered.
• Active Top Secret clearance.
• Experience with NIST 800-53, the Risk Management Framework, FISMA compliance, and federal security authorization processes.
• Knowledge of cybersecurity principles, security control implementation, vulnerability management, and incident response procedures.
• Understanding of network security technologies, including firewalls, IDS/IPS, VPNs, network segmentation, and cloud security (AWS, Azure).
• Analytical and problem-solving skills and experience with security assessment tools such as Nessus, Qualys, or ACAS.

Nice To Haves

• Prior experience supporting federal agencies, especially the Department of State.
• Professional security certification such as CISSP, CompTIA Security+, CEH, or GSEC.
• Knowledge of STIGs, CIS Benchmarks, FedRAMP authorization processes, and SIEM tools such as Splunk, ArcSight, or QRadar.
• Experience with DevSecOps practices.

Responsibilities

• Plan, implement, and monitor comprehensive security measures for computer networks, systems, and applications across the CA IT enterprise, aligned with the NIST Cybersecurity Framework.
• Maintain and update the enterprise service catalog with security classifications, compliance status, and risk assessments for operational services.
• Provide security guidance and technical consultation for infrastructure architecture initiatives, aligning them with Department of State security standards, FISMA requirements, and NIST 800-53 controls.
• Ensure engineering designs and technical solutions incorporate security best practices throughout the system development lifecycle and comply with Department of State security policies and STIGs.
• Implement, configure, and validate security controls in physical data centers, virtual hosting environments, and cloud platforms, including access controls, network segmentation, and encryption.
• Investigate security breaches, incidents, and vulnerabilities; perform forensic analysis; and coordinate containment and remediation.
• Coordinate security compliance for network engineering services, supporting secure connectivity and encrypted communications across more than 350 domestic and international facilities.
• Conduct vulnerability assessments, security scans, and compliance audits using industry-standard tools, identify weaknesses, and develop remediation recommendations.
• Support Authority to Operate processes and Risk Management Framework activities, including security control assessments and Plan of Action and Milestones management.
• Collaborate with IT service delivery teams, infrastructure engineers, and Government security personnel to integrate security into IT operations and promote a security-conscious culture.

Benefits

• Flexible time off benefit.
• Learning resources and learning and development opportunities.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level