Cyber Security Analyst, ISSM

CACI•Alexandria, VA

About The Position

As a senior cybersecurity analyst supporting the Joint Interagency Task Force 401 (JIATF-401), the Cyber Security Analyst, ISSM contributes to strengthening the Department of Defense’s counter-unmanned aircraft systems (C-UAS) enterprise and safeguarding warfighters, critical infrastructure, and the homeland. JIATF-401 synchronizes C-UAS efforts across defense and interagency communities by integrating threat intelligence, emerging technologies, testing, acquisition, and training to improve defenses against small UAS threats. The role serves as a hands-on Cybersecurity Analyst / Information Systems Security Manager-type practitioner in a high-tempo Joint environment. The successful candidate will execute day-to-day cybersecurity work associated with the Risk Management Framework (RMF), Authorization to Operate (ATO) packages, system documentation, security control coordination, and compliance sustainment. The position requires independent work, close attention to detail, stakeholder coordination, and follow-through on authorization tasks involving cloud, hybrid, and vendor-supported systems.

Requirements

Bachelor’s degree in cybersecurity, information assurance, information systems, information technology, computer science, or a related field.
Direct experience supporting RMF and ATO activities for Department of War information systems.
Practical experience in an ISSM, Information System Security Officer (ISSO), cybersecurity analyst, or equivalent role with responsibility for package development and sustainment.
Experience preparing, reviewing, and maintaining cybersecurity documentation required for authorization packages.
Working knowledge of security controls and vulnerability management.
Minimum Secret clearance required to start.
Willingness to travel up to 25%; travel is local.

Responsibilities

Execute day-to-day cybersecurity and RMF activities for assigned systems, including developing, coordinating, maintaining, and updating ATO packages and supporting documentation.
Support initial authorization, reauthorization, major changes, continuous monitoring, and package maintenance as a hands-on practitioner.
Coordinate with system owners, Program Management Offices, engineers, assessors, security control providers, and vendors to collect, validate, and organize cybersecurity artifacts.
Review and track security control implementation, plans of action and milestones, findings, vulnerabilities, and remediation activities.
Support development and maintenance of RMF documentation, including system inventories, boundary descriptions, control implementations, policies, procedures, diagrams, and supporting evidence.
Assist with cybersecurity requirements for cloud environments, externally hosted services, and vendor-supported systems.
Help integrate cybersecurity considerations throughout system design, development, fielding, operation, and upgrade activities.
Support acquisition and program documentation requirements related to cybersecurity strategies, compliance, and authorization readiness.
Coordinate across Joint, interagency, and organizational stakeholders when differing policies or processes affect system authorization and interoperability.
Track action items, suspense dates, dependencies, and documentation gaps to help move authorization packages through the process.
Identify risks, gaps, and blockers early and elevate issues with clear recommendations.