Cyber Security/Information Assurance Engineer

CACI International•Chantilly, VA

1d•$103,800 - $218,100

About The Position

The Cyber Security/Information Assurance Engineer/Technician functions as a Security Control Assessor (SCA), using NIST SP 800-53 and/or 800-53A Revision 4 guidance and procedures to comprehensively assess management, operational, and technical security controls used by or inherited by complex information systems. The role determines whether controls are correctly implemented, operate as intended, and produce outcomes that meet regulatory and statutory security requirements for National Security Systems. The SCA provides independent, evidence-based assessments to the designated Authorizing Official and helps identify and address system risks and vulnerabilities. The role includes hands-on security control testing, analysis of documentation and test results, use of commercial tools and custom scripts, vulnerability and compliance assessments, and preparation of reports and customer documentation. The engineer also supports coordination with other program elements and Government organizations, briefs management, and helps improve assessment operations. The position requires a bachelor's degree in a related technical field, 2 to 5 years of relevant hands-on experience, and an active TS/SCI with Polygraph clearance.

Requirements

Bachelor of Science in Cybersecurity, Computer Science, Information Systems, or Computer Systems Engineering.
2 to 5 years of hands-on experience in information security, network security, or systems engineering.
Knowledge of firewalls, Virtual Private Networks (VPNs), Intrusion Detection/Prevention Systems (IDS/IPS), and endpoint protection.
Proficiency in Linux, Windows, TCP/IP, and network architecture.
Understanding of risk assessments, security frameworks, vulnerability management, and incident response.
Ability to write technical reports and conduct briefings.
Minimum clearance required: TS/SCI with Polygraph.

Nice To Haves

Familiarity with security assessments supporting accreditation and/or authorization decisions.
Experience writing scripts or code using Python, C++, Java, Bash, or PowerShell for automation and log analysis.
Familiarity with the NIST Cybersecurity Framework and NIST Risk Management Framework requirements.
Familiarity with NIST SP 800-53 and/or 800-53A Revision 4, as well as NIST SP 800-30, 800-37, and 800-39.
Familiarity with Committee on National Security Systems (CNSS) Instruction No. 1253.
Knowledge of Federal laws, regulations, policies, and ethics relating to cybersecurity.
Knowledge of cyber defense and vulnerability assessment tools, including open-source tools, and their capabilities.
Knowledge of cybersecurity principles and organizational requirements relating to confidentiality, integrity, availability, authentication, and non-repudiation.
Knowledge of cybersecurity principles for managing risks related to the use, processing, storage, and transmission of information or data.
Knowledge of risk management processes, including methods for assessing and mitigating risk.
Knowledge of the operational impacts of cybersecurity lapses.
Knowledge of industry methods for evaluating, implementing, and disseminating IT security assessment, monitoring, detection, and remediation tools and procedures using standards-based concepts and capabilities.
Knowledge of IT security principles and methods, such as firewalls, demilitarized zones, and encryption.
Knowledge of cyber threats and known vulnerabilities described in alerts, advisories, errata, and bulletins.
Knowledge of computer networking concepts and protocols, and network security methodologies.
Knowledge of network security architecture concepts, including topology, protocols, components, and principles such as defense-in-depth.
Knowledge of cloud technology.
Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and other injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
Skill in discerning information-system and computing-environment protection needs, including security controls.
CompTIA Security+ certification.
GIAC Security Essentials (GSEC) certification.
Certified Information Systems Security Professional (CISSP) certification.

Responsibilities

Evaluate Government customer systems against NIST SP 800-53/53A Revision 4, NIST SP 800-30, 800-37, and 800-39, the Risk Management Framework, and other applicable standards, publications, guidelines, and regulations, using Xacta-360.
Provide independent and unbiased evidence to validate system trustworthiness for the designated Authorizing Official.
Conduct hands-on security control testing; analyze Body of Evidence documentation and test results; document risk; and recommend countermeasures.
Assess the severity of weaknesses or deficiencies in information systems and their operating environments, and recommend corrective actions for identified vulnerabilities.
Conduct hands-on security testing using commercial tools, custom-developed scripts, and procedures.
Execute vulnerability and compliance assessment tools and evaluate results for systems undergoing security assessment.
Participate in joint test teams with customer organizations and Government agencies to complete security assessments and adjudication.
Coordinate with other program elements conducting security testing.
Participate in or lead technical exchange meetings and application review boards, documenting action items and results.
Brief management on the status of action items and results of activities as needed.
Prepare security assessment reports containing the results and findings of assigned assessments.
Provide customer documentation describing identified system risks, planned test procedures, and test results.
Provide enhancements and standard operating procedures for assessment operations.
Maintain accountability for the integrity and confidentiality of the assessment process.
Implement and apply technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.
Investigate network device and information security incidents to determine the extent of compromise to national security information and automated information systems.