Information Systems Security Engineer (ISSE)

CACI International

1d•$75,200 - $158,100

About The Position

CACI is seeking an experienced cybersecurity and Information Assurance professional to support Navy Medicine Online (NMO) and its mission-critical information systems. Working with the NMO Information System Security Manager (ISSM), Information System Security Officer (ISSO), and government cybersecurity stakeholders, the ISSE assesses and strengthens the security posture of multiple computing environments. The role reviews technical security assessments, identifies vulnerabilities, threats, and compliance gaps, and recommends mitigation strategies. The ISSE supports development, implementation, and documentation of cybersecurity programs, policies, procedures, and controls, as well as ongoing compliance monitoring. The role supports the Risk Management Framework (RMF) under Defense Health Agency (DHA) requirements, including Annual Security Reviews (ASRs), Authority to Operate (ATO) activities, and Independent Verification and Validation (IV&V) reviews. It also uses approved AI capabilities to support cybersecurity analysis, automation, and operational efficiency, and works with ISSM and ISSO teams to help secure AI-assisted development across NMO.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related technical discipline.
Professional cybersecurity certification such as CISSP, CISM, CISA, CEH, or a comparable industry-recognized certification.
Experience conducting Annual Security Reviews (ASRs), IV&V activities, or comparable security assessments using NIST frameworks and cybersecurity standards.
Experience supporting RMF, security authorization, assessment, compliance, or continuous monitoring activities.
Experience with vulnerability management, security assessments, penetration testing, DLP best practices, and Zero Trust principles.
Strong knowledge of network architectures and protocols, firewalls, IDS/IPS technologies, encryption, and associated vulnerabilities.
Familiarity with cloud security concepts, controls, and best practices.
Experience assessing cybersecurity risks and developing or implementing mitigation strategies.
Proficiency with AI platforms and models, including applying AI and programming or scripting capabilities to automation, analysis, or technical workflows.
Strong understanding of cybersecurity incident response methodologies and practices.
Demonstrated analytical, troubleshooting, and problem-solving skills with strong attention to detail.
Strong written and verbal communication skills, including the ability to communicate cybersecurity concepts and risks to technical and non-technical audiences.
Ability to collaborate effectively in multidisciplinary teams and work independently with minimal supervision.
Active Top Secret security clearance.

Nice To Haves

Familiarity with Search Processing Language (SPL), Microsoft Visio, eMASS, ALM, and Confluence.
Prior experience supporting the U.S. Navy, Defense Health Agency (DHA), Bureau of Medicine and Surgery (BUMED), Department of Defense, or other military organizations.
Experience supporting Navy Medicine operations and mission environments.
Knowledge or experience related to Individual and Unit Readiness, medical waiver processing, and Global Health Engagements.
Experience securing or assessing AI-enabled applications, AI-assisted development environments, or emerging technologies in regulated or government environments.

Responsibilities

Conduct and review technical security assessments across multiple computing environments to identify vulnerabilities, threat vectors, security risks, and non-compliance with applicable cybersecurity standards and requirements.
Support implementation and execution of the Risk Management Framework (RMF), including security control assessments, documentation, remediation, and continuous monitoring.
Support Annual Security Reviews (ASRs), Authority to Operate (ATO) activities, and IV&V assessments in accordance with DHA, NIST, and applicable Department of Defense cybersecurity requirements.
Develop, implement, maintain, and document cybersecurity policies, procedures, controls, and formal security programs.
Evaluate vulnerabilities and security risks and recommend mitigation and remediation strategies.
Support vulnerability management, penetration testing, security assessments, Data Loss Prevention (DLP), incident response, and Zero Trust initiatives.
Evaluate network architectures, protocols, firewalls, IDS/IPS technologies, encryption solutions, cloud environments, and associated security vulnerabilities.
Partner with ISSMs, ISSOs, system administrators, developers, engineers, and government stakeholders to maintain and improve system security.
Use approved AI platforms, models, programming, and scripting capabilities for cybersecurity analysis, automation, documentation, and operational activities.
Assess cybersecurity considerations associated with AI-assisted software development and help ensure AI-enabled solutions meet established security requirements.
Participate in cybersecurity incident response, including analysis, documentation, remediation, and recommendations to prevent recurrence.
Prepare and maintain security documentation, assessment results, findings, remediation plans, and other artifacts for compliance and authorization activities.
Communicate cybersecurity risks, findings, recommendations, and remediation requirements to technical and non-technical stakeholders.