Cyber Security Analyst, ISSM

About the role

CACI is hiring a Cyber Security Analyst / Information Systems Security Manager (ISSM) type practitioner to support the Joint Interagency Task Force 401 (JIATF-401) in Alexandria. The role strengthens the Department of Defense's counter-unmanned aircraft systems (C-UAS) enterprise by synchronizing threat intelligence, emerging technologies, testing, acquisition and training so that commanders and partners can detect, track and defeat hostile drones. The position is full time, requires a minimum Secret clearance, involves up to 25% local travel and is open to regular employees.

Key responsibilities

• Carry out day-to-day cybersecurity and RMF activities for assigned systems, including developing, coordinating, maintaining and updating ATO packages and supporting documentation.
• Serve as the hands-on cybersecurity practitioner for authorization efforts, including initial authorization, reauthorization, major changes, continuous monitoring and package maintenance.
• Coordinate with system owners, PMOs, engineers, assessors, security control providers and vendors to collect, validate and organize cybersecurity artifacts.
• Review and track security controls, plans of action and milestones, findings, vulnerabilities and remediation activities.
• Maintain RMF documentation such as system inventories, boundary descriptions, control implementations, policies, procedures, diagrams and evidence.
• Assist with cybersecurity requirements for cloud environments, externally hosted services and vendor-supported systems, and integrate cybersecurity into system design, development, fielding, operation and upgrades.
• Support acquisition and program documentation on cybersecurity strategy, compliance and authorization readiness, and coordinate across Joint, interagency and organizational stakeholders.
• Track action items, suspense dates, dependencies and documentation gaps, identify risks and gaps early, and escalate issues with clear recommendations.

Required profile

• Bachelor's degree in cybersecurity, information assurance, information systems, information technology, computer science or a related field.
• Direct experience supporting RMF and ATO activities for Department of War information systems.
• Practical experience in an ISSM, ISSO, cybersecurity analyst or equivalent role with responsibility for package development and sustainment.
• Experience preparing, reviewing and maintaining cybersecurity documentation for authorization packages.
• Ability to work independently, manage details, coordinate across many stakeholders and push difficult authorization tasks to completion.

Required skills

• Working knowledge of security controls and vulnerability management.
• Experience with RMF and ATO authorization packages.

What we offer

• Proposed pay range of $103,800 - $218,100, depending on location, contract labor category, experience, skills and certifications.
• Healthcare, wellness, financial, retirement, family support, continuing education and time off benefits.
• A flexible time off benefit and access to learning resources.