Information System Security Officer (ISSO)

CACI • Jessup, MD

5d • $86,600 - $181,800

About The Position

CACI is seeking an experienced Information Systems Security Officer to support cybersecurity operations, risk management, and compliance activities in a Department of Defense environment. The ISSO collaborates with the Information Systems Security Manager and technical teams to maintain the security posture of mission-critical information systems and support Assessment and Authorization (A&A) activities.

The role applies expertise in the Risk Management Framework (RMF), vulnerability management, and security compliance to help ensure systems meet federal and DoD cybersecurity requirements. It is described as a collaborative environment focused on technical excellence, accountability, continuous improvement, and supporting critical customer missions.

Requirements

• Active TS/SCI with Polygraph clearance.
• High school diploma or GED and at least 6 years of relevant experience, or a bachelor's degree and at least 2 years of relevant experience.
• Information Assurance Technical (IAT) Level II certification (CompTIA Security+ CE).
• CompTIA A+ CE certification.
• CompTIA Network+ CE certification.
• Knowledge of DoD cybersecurity policies, RMF processes, and A&A requirements.
• Experience supporting cybersecurity compliance, vulnerability management, system security documentation, and risk mitigation.
• Familiarity with ACAS/Nessus, STIG assessments, POA&Ms, SSPs, and continuous monitoring processes.
• Knowledge of configuration management, security patching, and information system security controls.
• Strong written and verbal communication, organizational, and interpersonal skills, including the ability to communicate technical information to diverse audiences.

Nice To Haves

• Experience independently managing complex ATO submissions and coordinating with Security Control Assessors (SCAs) and Authorizing Officials (AOs).
• Experience supporting multiple interconnected systems or enterprise-level cybersecurity environments.
• Experience leading cybersecurity readiness reviews, compliance inspections, or security audits.
• Advanced proficiency in analyzing vulnerability trends and developing long-term cybersecurity improvement strategies.
• Experience collaborating with cross-functional engineering, infrastructure, and program management teams to resolve complex security challenges.

Responsibilities

• Support the ISSM in maintaining the operational cybersecurity posture of assigned information systems, programs, and enclaves.
• Provide cybersecurity oversight and support for A&A activities in accordance with FISMA, DoD requirements, and the RMF.
• Develop, review, and maintain System Security Plans (SSPs), security authorization packages, and supporting documentation for obtaining and maintaining Authorities to Operate (ATOs).
• Review authorization packages for completeness, including CCIs, SCA-V results, STIGs, POA&Ms, and cybersecurity strategies.
• Conduct vulnerability assessments using ACAS, Nessus, and other approved security scanning tools; identify risks and recommend remediation.
• Perform STIG assessments, monitor IAVM compliance, and track corrective actions through completion.
• Maintain configuration management records for security software, hardware, firmware, servers, workstations, and network infrastructure.
• Coordinate security patches, system upgrades, and configuration changes to maintain security and compliance.
• Develop and maintain cybersecurity documentation, including system architecture, security boundaries, hardware and software inventories, data flows, PPSM records, and risk assessments.
• Evaluate applications, infrastructure, enclaves, and enterprise environments to identify cybersecurity risks and assess proposed accreditation boundaries.
• Implement and enforce cybersecurity policies, standards, and Standard Operating Procedures.
• Track and report security authorization statuses, vulnerabilities, compliance findings, and remediation progress.
• Communicate technical cybersecurity findings and recommendations to technical and nontechnical stakeholders.

Benefits

• Flexible time off benefit.
• Learning resources and learning and development opportunities.
• Competitive compensation.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED