The Opportunity:
As an Information Systems Security Officer (ISSO), you will be responsible for ensuring that appropriate operational security postures and active security authorizations for all projects/security plans (SPIDs) are maintained for information processing systems. ISSO’s are responsible for creating and maintaining required security body of evidence (BoE) artifacts such as Plans of Actions and Milestones (POAMs), and that control implementations and test plans meet all Assessment and Authorization (A&A) milestone requirements per customer requirements and practices. You will be responsible for conducting vulnerability assessments, assisting programs in managing POA&M resolution, and consulting with program teams as they apply ICD 503 and the RMF standards throughout the IT Systems lifecycle. This is a key position and requires customer approval.
Responsibilities:
A qualified candidate will perform the following duties and responsibilities, but are not limited to:
- Conduct in-depth security reviews of program systems, applications, and services
- Participate in security assessments and after assessment, develop a transition plan to address areas for remediation to align the application with the baseline standards
- Ensuring that appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the Information System Owner (ISO).
- Conduct research, develops, implements, test, and reviews an applications information security IAW DoD/NIST RMF requirements in order to protect information and prevent unauthorized access.
- Direct the contracting team about security measures, explain potential threats, implement security measures, and monitor applications in order to meet or exceed all DoD/NIST RMF requirements, resulting in faster and more accurate software releases.
- supporting the maintenance of active security authorizations for all projects/security plans (SPIDs) and of required security body of evidence (BoE) artifacts such as POAMs, control implementations and test plans to meet all Assessment and Authorization (A&A) milestone requirements
- Overseeing the continuous integration of newly developed or modernized applications and services with all enterprise security services (ESS)
- Implementing all applicable manual Security Technical Implementation Guides (STIGs), vendor hardening guides and ensuring timely installation of all available patches
- Usage of security relevant databases such as XACTA 360, Service+, Continuity Planning Tool (CPT), and Software Approval Process (SWAP)
Qualifications:
Required:
• Minimum of Bachelor’s Degree in Computer Science, Information Systems, Engineering or other related technical or scientific discipline
• Minimum of five (5) years of ISSO experience in the IC and preferably NGA, for multiple SPIDs
• Experience in conducting security scans
• Experience in applying security patches and fixes
• CISSP certification or Security + Certificate
• Must be able to obtain Polygraph within 30 days
-What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
The proposed salary range for this position is:
$75,200-$158,100