Cyber Security Subject Matter Expert

CACI International • Sterling, VA

1d

About The Position

CACI is seeking a subject matter expert level Cyber Security Engineer to support a new DoD contract. This opportunity is for individuals interested and passionate about working as part of a mission critical team. On this team, cloud security engineers are an integral part of the development team and are expected to be flexible and adaptive to supporting the needs of the program. Responsibilities include serving as an information security specialist, reviewing all software, hardware, and infrastructure changes on the contracts, following the risk management framework process to support system accreditation, continuous monitoring, and security mitigation. The role also involves maintaining security documentation and other necessary tasks. The right candidate will understand software development, system administration, networking, and security, and be able to take a holistic systems level approach to influence how applications are built to meet higher level security requirements associated with a system that bridges security domains. Additionally, the candidate will help software engineers understand zero trust architecture for a multi-releasability domain.

Requirements

• Bachelor's degree in information systems, systems engineering, electrical engineering, information technology, or related field with 7+ years of relevant experience
• Subject matter expertise with DOD/IC system security control requirements
• Subject matter expert level knowledge of system security engineering principles and IT technologies such as firewalls, encryption, and proxies.

Responsibilities

• Using forensic tools for attack reconstructions, determine how to correct vulnerabilities.
• Work with development teams to create, maintain, and monitor data connections, NPE security certificates, firewall connection requests.
• Apply cloud, network, and security best practices to ensure that all requests meet the application goals while minimizing security risk.
• Implement (continually) and improve DevSecOps process maintained in Linux/Cloud based development environment.
• Apply best industry practices and processes to capture, refine, and assist in the prioritization of requirements based on risk, engineering principles, and mission requirements.
• Architect security infrastructure as needed to protect against cyber attacks.
• Providing enhanced security architectures, development tools, and information systems to facilitate secure missions.
• Establish program practices to support customer Information System Owners (ISOs) guidance and requirements
• Apply capability based security analysis of system security architectures, identifies vulnerabilities, and provides suggested mitigation alternatives.
• Participate in design, development, and implementation of information systems to ensure these systems are in compliance with required security features and safeguards.
• Conduct security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
• Evaluate and interpret scan results, and works with system developers and system

Benefits

• competitive compensation
• benefits
• learning and development opportunities
• broad and competitive mix of benefits options is designed to support and protect employees and their families
• healthcare
• wellness
• financial
• retirement
• family support
• continuing education
• time off benefits
• flexible time off benefit

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 5,001-10,000 employees