Information Systems Security Officer

CACI•Austin, TX

About The Position

CACI is seeking a cybersecurity professional to support system security posture assessments, authorization processes, and continuous monitoring for CACI products. The successful candidate will work with CACI team members and system owners to assess security controls on new and existing systems, resolve or mitigate security findings, and maintain the security posture of systems and networks. The role conducts Risk Management Framework (RMF) tasks to obtain Authorization to Operate (ATO) for CACI systems and networks. The position is categorized as Information Technology, is regular and full time, requires an active TS/SCI clearance to start, and involves up to 10% travel within the continental United States. A bachelor’s degree in information technology or a related information systems discipline is desired; relevant experience may be considered in lieu of a degree. The proposed salary range is $82,700–$173,900 USD. CACI describes a culture centered on integrity, character, innovation, trust, and supporting national missions. Employees have access to a flexible time-off benefit, learning resources, competitive compensation, benefits, and learning and development opportunities. Benefits include healthcare, wellness, financial and retirement support, family support, continuing education, and time off.

Requirements

Must have an active Top Secret/SCI clearance to start.
Bachelor’s degree in information technology or a related information systems discipline desired; relevant experience may be considered in lieu of a degree.
Five or more years of experience.
Strong background in information technology processes and/or systems administration.
At least five years of recent experience generating and implementing System Security Accreditation/ICD 503 packages for DoD and/or Intelligence Community customers.
At least five years of recent experience establishing security processes, practices, and principles for TOP SECRET communication-network-connected systems.
At least five years of recent experience with NIST SP 800-53, CNSSI 1253, and FISMA requirements.
Working knowledge of RMF.
Working knowledge of Windows and Linux.
Understanding of networking concepts.
8570.01/8140.03 compliance through Security+ or equivalent.
Ability to work independently with minimal supervision and as part of a team.

Nice To Haves

Ability to work in an agile, fast-paced environment.
Excellent verbal and written communication skills for technical and security-related topics.
Experience with XACTA and/or eMASS.
Experience using network security vulnerability assessment tools, including ACAS-NESSUS, SCAP, and HBSS.
Knowledge of DoD/IC Information Assurance Vulnerability Management (IAVM) and Configuration Management processes.
CISSP certification.
CGRC certification.
Linux OS certifications.

Responsibilities

Collaborate with system integrators and administrators to harden information systems to the required acceptable level.
Provide full Assessment & Authorization (A&A) support and technical security guidance through all phases of the system authorization process and/or Risk Management Framework (RMF).
Generate and author security documentation in support of security authorization efforts.
Conduct security reviews of information system security plans (SSPs) for networks and information systems.
Research security vulnerabilities and provide guidance to mitigate risks to information systems.
Develop corrective actions into a coherent information security strategy.
Review and analyze systems and networks architecture diagrams.
Communicate security-focused solutions and expertise for technically complex systems and implementation challenges.
Conduct RMF tasks to obtain Authorization to Operate (ATO) for CACI systems and networks.
Work with system owners to resolve or mitigate information security findings and help maintain systems’ and networks’ security posture.