Cyber Security Analyst

CACI International Inc is a company that supports the Department of Defense with communication systems modernization projects. They are seeking a Cyber Security Analyst to maintain security at customer sites, collaborate with government contractors, and support cybersecurity program strategy.

Responsibilities:

• Proactively ensure a safe work environment and adhere to CACI EH&S policies and procedures
• Collaborate with government and /or subcontractors at customer site for security Solution integration into existing infrastructure
• Serve as technical resource at customer briefings
• Understand and adhere to all CACI Ethical and Compliance policies
• Support Cybersecurity Program strategy
• Apply information security in accordance with National/DoD/Army Directive security policy including, but not limited to, DODI 8500.01, DODI 8510.01, NIST SP 800-30, NIST 800-37, NIST 800-53a, NIST SP 800-61, NIST 800-171, AR 25-2, and AR 380-5
• Assess entire system lifecycle requirements and network security impacts for assigned systems
• Support Department of Defense (DOD) Risk Management Framework (RMF) Assess and Authorize (A&A) Process for development and sustainment projects
• Support program and customer management, and government Authorizing Official (AO) for all information security status, policies, and procedures
• Document DoD RMF Security Implementation Plan artifacts. Coordinate and assist development team with application artifact documentation
• Assist Sr. ISSOs in preparing and presenting Enterprise Mission Assurance Support System (eMASS) packages to the Control Assessor (CA)
• Assess and analyze US-CERT, ACERT, and current threat environment
• Enhance – Support Implementation of Cybersecurity vulnerability/A&A hardening testing
• Optimize – Cybersecurity development environment certification
• Architect & Engineer security – support development of security goals, capabilities, controls, and architecture
• Design & Implement security – vulnerability management, build security into development
• Integrate & Test Security – test patches and settings, document A&A artifacts
• Validate & Verify security – validate patch status and software control status
• Maintain security posture – audit security settings, track security training, monitor threats, track reaccreditation
• Continuously evaluate and recommend innovative proven best business practices and tools to enhance defense-in-depth
• Identify, assess, and recommend zero-day cyber threat remediation
• Address Cybersecurity issues to help maintain Continuity of Operations Plan (COOP)
• Support information security vulnerability testing and mitigate any nonconformance
• Create and manage Plan of Action & Milestones (POA&M)
• Support Implementation and validation of Security Technical Implementation Guide (STIG) requirements for all development and implementation projects
• Perform other duties as required

Requirements:

• Possess and maintain a U.S. Government security clearance
• Knowledge of risk assessment tools, technologies, and methods
• Knowledge to support designing secure networks, systems, and application architectures
• Must possess or quickly obtain industry certifications for security (Security+, CISSP, etc) for IAT Level II
• Excellent interpersonal and presentation skills
• Excellent oral and written communications skills
• Bachelor's degree in computer science or related field
• Industry certifications related to data networking (CCNA/CCNP, JNCIA/JNCIP, etc)
• Experience with DoD eMASS system
• Knowledge of Commercial Solutions for Classified (CSfC)
• Knowledge of Software Defined Networking (SDN)
• Experience in using drawing tools such as Microsoft Visio or AutoCAD