Job Title: Information System Security Officer
Job Category: Security
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI with Polygraph
Employee Type: Regular
Percentage of Travel Required: None
Type of Travel: None
* * *
As an Information System Security Officer, you will be responsible for maintaining operational security posture for the information system, support security authorization activities in compliance with the sponsor's policy and develop/maintain procedures to perform vulnerability/risk assessment analysis to support certification and accreditation. As a Subject Matter Expert, assist and guide development teams implementing SecOps and IRM/CAM processes.
Job Duties & Responsibilities:
• Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
• Review and develop Automated Information System (AIS) accreditation/certification support documentation
• Notify the customer when changes occur that might affect AIS accreditation/certification
• Perform system and network self-inspections
• Provide security coordination and review on all system test plans
• Perform continuous monitoring of automated vulnerability detection scan results and track the engineering efforts to remediate/address vulnerabilities
• Attend system technical exchange meetings
• Identify AIS vulnerabilities and implementing countermeasures
• Represent the customer on various technical review teams
• Conduct security surveys at subordinate facilities and gathering pertinent security documentation for inclusion into system accreditation packages
• Coordinate, prepare, and track AIS inspections, reports, and responses
• Maintain AIS security records
• Advise on network nodes operating in subordinate government and contractor facilities and receiving direction from the government PSO
• May provide work leadership for lower-level employees and customer
• Assist and support migration effort for SecOps and IRM/CAM processes to new tools
• Facilitate communication between technical teams and stakeholders, translating security requirements into actionable user stories
• Support security authorization activities including Authority to Operate (ATO) processes and continuous ATO modernization initiatives
Required Qualifications:
• Bachelor's degree or equivalent and 5 years of related experience
• Sec+ or any level II DoD 8570 compliant cert
• Experience with network and information system security principles and test practices
• Familiarity with cloud computing
• Previous experience controlling, labeling, virus scanning, and appropriately transferring data (upload/download) between information systems at varying classification levels
• Build rapport with military, civilian, and contractors at all levels
• Familiarity with applicable IC, DoD policies, procedures and operating instructions related to IT, IA, and IM
• Excellent communications skills including verbal and written
• Experience using Microsoft Office products
• Comfortable working with users and customers, preparing and providing briefings for related to security initiatives
Desired Qualifications:
• Systems Security Certified Practitioner (SSCP) certification
• Exposure to projects using an Agile development approach
• Experience leading mid to large security initiatives and managing small teams
• Experience with Confluence
-
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing…