Cyber Security Specialist

🔥 0 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $90.3k - $189.6k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CACI International Inc

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1962

🎖️ Defense

🏛️ Government

🔒 Cybersecurity

🔥 Funding within the last year

💰 $500M Post-IPO Debt on 2026-02

Defense • Government • Cybersecurity

CACI International Inc is a U. S. -based government contractor that provides technologies and professional services to national security, defense, and federal civilian customers. CACI delivers solutions across cyber and digital operations, enterprise IT modernization, electronic warfare, counter-unmanned systems (C-UxS), space and optical communications, agile DevSecOps software development, and mission engineering and logistics support. The company positions itself as a large prime contractor that uses advanced software, analytics, sensing, and hardware to detect and counter evolving threats and modernize government technology architectures.

📋 Description

• Perform assessment and authorization coordination for STIG testing • Advise and assist the customer with the Risk Management Framework (RMF) • Develop Plans of Action and Milestones (POAMs) for system deficiencies • Assess compliance against NIST 800-53 Rev 5 controls • Support PMO Assess & Authorize (A&A) records • Perform assessment, compliance, and validation of IT systems and development environments • Advise the GCSS-MC PMO on system risks, mitigation courses of action, and operations • Perform security evaluations and vulnerability assessment reviews using ACAS, Nessus, and SCAP tools • Identify applicable STIGs and conduct automated and manual STIG reviews • Liaise with network, application, and system administrators to correct deficiencies • Review new systems and applications, identify issues, and draft eMASS and OPDIR POAMs • Ensure systems and applications meet DISA STIG standards • Advise stakeholders on cybersecurity requirement implementation • Provide DoD and Marine Corps RMF subject matter expertise • Develop and maintain documentation for networks, cloud environments, information systems, and technologies • Perform risk and vulnerability assessments for authorization and prepare Security POAMs • Track and report compliance with cybersecurity regulations and directives • Maintain an Information Security Continuous Monitoring (ISCM) Plan • Coordinate security issues, A&A, connection approvals, change requests, and waiver requests • Perform network, cloud, information system, hardware, software, and device security assessments • Validate system patching and scanning reviews; develop POA&Ms and reports • Develop and implement cybersecurity mitigation processes, procedures, and capabilities • Validate the continued effectiveness of security measures • Analyze cybersecurity posture and provide reports to the Cyber PMO and stakeholders • Lead small technical workstreams developing automation for ACAS, STIG, and control analysis processes • Conduct root-cause analysis and support corrective actions for cybersecurity incidents • Collaborate with the USMC Cyber Operations Group during penetration testing and vulnerability assessments

🎯 Requirements

• Bachelor's degree in Cyber Security, Information Technology, or Computer Science with experience in Cyber Security • BS/BA and at least 8+ years of ISSO experience supporting US Marine Corps or DoD programs • 5+ years’ experience with the Risk Management Framework (RMF) • 5+ years’ experience using ACAS/Tenable Nessus Vulnerability Scanner • 5+ years’ experience with vulnerability and compliance assessment scanning tools and reporting • 5+ years of United States government security policies, including NIST 800-53 Rev 4/5 and NIST 800-171 • Knowledge of DODI 8500.01 and DODI 8510.01 • Security+ certification required • Excellent oral and written communication skills • Experience with all RMF steps and execution in a USMC environment • Experience developing cybersecurity automation or scripting for vulnerability management and compliance workflows • Experience with USMC cybersecurity processes and DoD-specific monitoring tools • Experience with Splunk, AWS, OCI, or Azure cloud environments • Experience working in Agile environments • Ability to apply FedRAMP, FISMA, NIST, CNSSI, and Oracle Cloud IL4/IL5 security concepts • Lead small technical workstreams of up to five analysts • Root-cause analysis and corrective action experience for cybersecurity incidents • Familiarity with MC eMASS workflows is an added plus • Familiarity with automation or AI-enabled cybersecurity capabilities is an added plus • Up to 10% travel required

🏖️ Benefits

• Flexible time off benefit • Robust learning resources • Healthcare benefits • Wellness benefits • Financial benefits • Retirement benefits • Family support benefits • Continuing education benefits • Time off benefits • Flexible work arrangements