Cyber Security Specialist

The Opportunity:

CACI is seeking a Cyber Security Specialist to support our customer Global Combat Support System Marine Corps (GCSS-MC). This senior-level position provides Cyber Security oversight guidance and support following the Program Management Office (PMO) requirements.

Responsibilities:

Perform assessment and authorization coordination for STIG testing advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving system deficiencies following DODI 8510.01 and NIST 800-37. The duties of this position include assessing compliance against controls listed in NIST 800-53 Rev5 and supporting the Program Management Office (PMO) associated Assess & Authorize (A&A) records. Performs assessment compliance and validation of IT systems to support the Cybersecurity program at GCSS-MC. The Contractor shall execute a comprehensive assessment compliance and validation of the customer system and development environment to ensure compliance with regulations security and standards and advise GCSS-MC PMO on system risks risk mitigation courses of action and operations. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities.

Additionally the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessment reviews using the DOD Assured Compliance Assessment Solution (ACAS) Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool and manual STIG review process. The Cyber Security Specialist will serve as a liaison with network application and system administrators to correct identified deficiencies. The Cyber Security Specialist will also review new systems and applications being introduced into the GCSS or Development environment identify issues and draft POAM for the government to include eMASS POAMs as well OPDIR POAM (USMC). The contractor will liaise with the Cyber PMO to ensure systems and application meet the DISA Security Technical Implementation Guides (STIG) standards.

Typical duties include:

• Advise stakeholders on the adequacy of implementation of cybersecurity requirements.
• Provide DoD & MC RMF subject matter expertise to GCSS including other Contractors as well as cross functional teams and assist with the development and execution of the RMF program. Familiarity with MC eMASS Workflows is an added plus.
• Develop and maintain supporting documentation for new and existing networks cloud environments information systems and technologies as they are introduced into the environments.
• Perform risk and vulnerability assessments of IT and IS for authorization; prepare Security POAM (OPDIR) for submission to the Cyber PMO.
• Track and report to Cyber PMO compliance with applicable Cybersecurity regulations and directives. Ensure timely notifications are made to responsible individuals and organizations to prevent lapses in accreditations (e.g. 30 60 and 90-day notices).
• Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing information security awareness vulnerabilities security controls and threats to support organizational risk management decisions.
• Identify assess and advise on cybersecurity control compliance and associated risks.
• Coordinate with Cyber PMO to resolve security issues A&A connection approvals change requests (CR) and waiver requests.
• Perform network cloud information systems hardware software and device security assessments as well as the application and execution of policy including project management support services.
• Validate the patching of systems perform validation scanning review develop Plans of Action & Milestone (POA&Ms) and report as directed by applicable policies procedures and regulations.
• Provide subject matter expertise for system development and the implementation of Cybersecurity mitigation strategies.
• Develop and implement required processes procedures and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.
• Identify implement and validate the continued effectiveness of key performance parameters and applied security measures
• Perform analytics on cybersecurity posture and provide reports to the Cyber PMO and applicable stakeholders as required per ISCM and ISSM direction.

Qualifications:

Required:

• The Cyber Security position typically requires a bachelors degree in Cyber Security Information Technology or Computer Science with experience in Cyber Security.

• BS/BA and at least 3-5 years of ISSO experience in support of US Marine Corps or DoD programs
• 5 years experience with the Risk Management Framework (RMF)
• 5 years experience using Assured Compliance Assessment Solution (ACAS)/Tenable Nessus Vulnerability Scanner
• 5 years experience with vulnerability and compliance assessment scanning tools and reporting
• 5 years of United States government security policies including but not limited to NIST 800-53 Rev 4/5 and NIST 800-171
• Knowledge of DODI 8500.01 DODI 8510.01
• Highly responsible team-oriented individual with solid communication skills and work ethic; self-starter
• Resiliency in dealing with challenging situations and environments
• Security certification required
• Excellent oral and written communication skills
• Ability to connect the dots. This is a large operational system in transition to a Cloud environment. Apply FedRAMP FISMA NIST CNSSI and Oracle Cloud IL4/IL5 security concepts to ensure technical solutions meet required compliance standards.
• Other opportunities within include working with associate training suite. Knowledge of non-networked connected systems and assessment activities of same is a plus.
• Experience with all RMF Steps and their execution within a demanding USMC environment is required.
• Understanding in the role of the contractor to support the government client is essential.
• Lead small technical workstreams (up to five analysts) to develop automation for ACAS STIG and control analysis processes that reduce incident response cycles and improve accuracy.
• Conduct rootcause analysis and support corrective action efforts for cybersecurity incidents working collaboratively with the USMC Cyber Operations Group (MCCOG) during penetration testing and vulnerability assessments.
• Experience developing cybersecurity automation or scripting for vulnerability management and compliance workflows.
• Experience with USMC cybersecurity processes and DoWspecific monitoring tools.
• Experience with Splunk AWS OCI or Azure cloud environments.
• Experience working in Agile environments.
• Familiarity with developing automation or AIenabled capabilities to enhance cybersecurity operations is an added plus.

What You Can Expect:

A culture of integrity.

At CACI we place character and innovation at the center of everything we do. As a valued team member youll be part of a high-performing group dedicated to our customers missions and driven by a higher purpose to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. Youll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together we will advance our nations most critical missions build on our lengthy track record of business success and find opportunities to break new ground in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including but not limited to geographic location Federal Government contract labor categories and contract wage rates relevant prior work experience specific skills and competencies education and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI you will receive comprehensive benefits such as; healthcare wellness financial retirement family support continuing education and time off benefits.

Since this position can be worked in more than one location the range shown is the national average for the position.

The proposed salary range for this position is:

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex pregnancy sexual orientation age national origin disability status as a protected veteran or any otherprotectedcharacteristic.