Information Systems Security Engineer

CACI International•Colorado Springs, CO

4d•$82,100 - $172,400•Onsite

About The Position

The CIS program supports our intelligence customer deliver IT services to conduct its globally distributed operations. We are driving an exciting technological transformation of customer IT services by leading the design, development, implementation, and operation of cutting-edge solutions. This includes continuous service improvement through the modernization of IT system infrastructure. CACI is looking for an experienced, innovative, and motivated Information Systems Security Engineer to support the mission objectives and needs of the customer, the Defense Intelligence Agency. In this role, you will be a key technical member of our engineering team and contributor to designing, delivering, and maintaining secure IT services. You will collaborate with our team of engineers, cyber professionals and our government stakeholders to secure some of the world’s most sensitive systems. The position is contingent upon award of the DIA SITE III CIO Infrastructure Services (CIS) contract.

Requirements

Must hold a current Top Secret SCI clearance with ability to obtain poly prior to start
DOD 8140 Certification applicable to role (minimum Security+)
HS and 12+ years of experience, an AA and 10+ years of experience, BS/BA and 8+ years of experience, MS/MA and 6+ years of experience, or PhD and 4+ years of experience
Certification and two years of hands-on technical experience demonstrating progressively increasing responsibility for information assurance
Experience in ICD 503 certification and accreditation
Familiarization with NIST Special Publication 800-37 Revision 1, Guide for Applying the Risk Management Framework to Federal Systems; Committee on National Security Systems Instruction (CNSSI) 1253; and NIST SP 800-53 Revisions 3 and 4, NIST SP 800-39, and NIST SP 800-30
Maintain required technical and security training relative to cybersecurity duties in accordance with DoD Instruction 8510.01, Risk Management Framework for DoD Systems; NIST Special Publication 800-53, Recommended Security Controls for Federal Information Systems Organizations; and DoD Directive 8570.01-M, IA Workforce Improvement Program
Willingness to learn new skills and new technologies

Nice To Haves

Degree in Science, Technology, Engineering, or Mathematics
Familiarity with IC ITE services and classified environments
ITIL 4 Foundation Certification (or higher)

Responsibilities

Support engineering solution design and development and their adherence to all aspects of applicable U.S. Government Information Assurance (IA) standards and programs, including Director of Central Intelligence Directives (DCIDs), IC Directive (ICD) 503, and associated DoD and NIST publications
Implements Zero Trust Architecture (ZTA) principles and capabilities supporting the cybersecurity posture for the environment and the network; enforces compliance with Identity Credential and Access Management (ICAM) policies for all information systems, services, and solutions over the life of the contract
Research, analyze, and recommend security controls and their implementation in IT solutions using Risk Management Framework (RMF) and other applicable guidance
Oversee development of test cases, test scenarios, and specific test scripts that exercise and validate application of identified security controls; includes both expected positive and negative outcome testing for comprehensive cybersecurity coverage
Develop procedures and templates for Assessment and Authorization (A&A) documentation and related artifacts
Oversee all development and integration cybersecurity testing initiatives and ensures sufficient bodies of evidence artifacts are produced to demonstrate infrastructure security posture outcomes
Collaborate with program ISSO and government stakeholders of cyber hygiene best practices, vulnerability awareness, actions, and remediations, including those from DoD IAVA/IAVB, CERT CVE, and IC-related tracking databases
Guide and provide expertise into other cross-discipline IA controls or services (e.g., industrial security, physical security, special programs) for program and Government security personnel
Provide engineering services in support of operations transition
Aid in creation of content required documentation, reports, and data adhering to schedule, format, and content requirements specified by the contract