Cybersecurity Analyst, ISSM

CACI International•Alexandria, VA

2d•$103,800 - $218,100

About The Position

The Cybersecurity Analyst, ISSM supports Joint Interagency Task Force 401 (JIATF-401) and its mission to strengthen the Department of Defense’s counter-unmanned aircraft systems enterprise. This experienced, hands-on practitioner executes day-to-day cybersecurity work for systems in a high-tempo Joint environment, including Risk Management Framework (RMF) activities, Authorization to Operate (ATO) packages, system documentation, security-control coordination, and compliance sustainment. The role involves working independently and coordinating across stakeholders to advance authorization tasks for cloud, hybrid, and vendor-supported systems.

Requirements

Bachelor’s degree in cybersecurity, information assurance, information systems, information technology, computer science, or a related field.
Active Secret clearance.
At least 3 years of related experience.
Direct experience supporting RMF and ATO activities for Department of War information systems.
Practical experience in an ISSM, information system security officer (ISSO), cybersecurity analyst, or equivalent role involving package development and sustainment.
Experience preparing, reviewing, and maintaining cybersecurity documentation required for authorization packages.
Working knowledge of security controls and vulnerability management.

Responsibilities

Execute day-to-day cybersecurity and RMF activities for assigned systems, including developing, coordinating, maintaining, and updating ATO packages and supporting documentation.
Support system authorization efforts, including initial authorization, reauthorization, major changes, continuous monitoring, and package maintenance.
Coordinate with system owners, Program Management Offices, engineers, assessors, security control providers, and vendors to collect, validate, and organize cybersecurity artifacts.
Review and track implementation of security controls, plans of action and milestones, findings, vulnerabilities, and remediation activities.
Develop and maintain RMF documentation, including system inventories, boundary descriptions, control implementations, policies, procedures, diagrams, and supporting evidence.
Assist with cybersecurity requirements for cloud environments, externally hosted services, and vendor-supported systems.
Help integrate cybersecurity considerations throughout system design, development, fielding, operation, and upgrade activities.
Support acquisition and program documentation requirements related to cybersecurity strategies, compliance, and authorization readiness.
Coordinate with Joint, interagency, and organizational stakeholders when differing policies or processes affect authorization and interoperability.
Track action items, suspense dates, dependencies, and documentation gaps to advance authorization packages.
Identify risks, gaps, and blockers early and elevate issues with clear recommendations.