Cyber Security Specialist

🔥 0 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $75.2k - $158.1k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CACI International Inc

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1962

💼 Consulting

🎖️ Defense

Consulting • Defense • IT

CACI International Inc is a diversified company that provides a wide range of services and solutions primarily to the U. S. government and commercial sectors. CACI specializes in offering security services, IT solutions, and intelligence support, helping clients enhance their cyber capabilities and secure their networks. The company is recognized for its innovative workforce and the technology it provides to clients in enterprise and mission-critical environments. CACI is committed to diversity and inclusion, offering an array of career opportunities for both new graduates and experienced professionals, including veterans.

📋 Description

• Provide Cyber Security oversight, guidance, and support for the GCSS-MC Program Management Office • Coordinate assessment and authorization activities for STIG testing and Risk Management Framework requirements • Develop Plans of Action and Milestones (POA&Ms) for resolving system deficiencies • Assess compliance with NIST 800-53 Rev. 5 controls and support GCSS-MC Assess & Authorize records • Perform assessment, compliance, and validation of IT systems and development environments • Advise the PMO on system risks, mitigation courses of action, and operations • Conduct security evaluations and vulnerability assessment reviews using ACAS, Nessus, and SCAP tools • Identify applicable STIGs and perform automated and manual STIG assessments • Liaise with network, application, and system administrators to correct deficiencies • Review new systems and applications, identify security issues, and draft eMASS and OPDIR POAMs • Ensure systems and applications meet DISA STIG standards • Advise stakeholders on cybersecurity requirement implementation • Provide DoD and Marine Corps RMF subject matter expertise and support RMF program execution • Develop and maintain documentation for networks, cloud environments, information systems, and technologies • Perform risk and vulnerability assessments for authorization and prepare Security POAMs • Track and report cybersecurity regulatory and directive compliance to the Cyber PMO • Maintain accreditation notification timelines, including 30-, 60-, and 90-day notices • Develop and maintain an Information Security Continuous Monitoring Plan • Identify, assess, and advise on cybersecurity control compliance and risks • Coordinate security issues, A&A, connection approvals, change requests, and waiver requests • Perform network, cloud, information system, hardware, software, and device security assessments • Validate system patching and scanning results, develop POA&Ms, and report according to policies and regulations • Provide cybersecurity mitigation strategy subject matter expertise • Develop and implement processes, procedures, and capabilities to mitigate software and hardware vulnerabilities • Validate security measures and key performance parameters • Analyze cybersecurity posture and provide reports to the Cyber PMO and stakeholders • Lead small technical workstreams of up to five analysts developing automation for ACAS, STIG, and control analysis processes • Conduct root-cause analysis and support corrective actions for cybersecurity incidents • Collaborate with the USMC Cyber Operations Group during penetration testing and vulnerability assessments

🎯 Requirements

• Bachelor’s degree in Cyber Security, Information Technology, or Computer Science • At least 3–5 years of ISSO experience supporting US Marine Corps or DoD programs • 5+ years of experience with the Risk Management Framework (RMF) • 5+ years of experience using ACAS/Tenable Nessus Vulnerability Scanner • 5+ years of experience with vulnerability and compliance assessment scanning tools and reporting • 5+ years of experience with United States government security policies, including NIST 800-53 Rev. 4/5 and NIST 800-171 • Knowledge of DODI 8500.01 and DODI 8510.01 • Security+ certification required • Experience with all RMF steps and execution in a demanding USMC environment • Ability to apply FedRAMP, FISMA, NIST, CNSSI, and Oracle Cloud IL4/IL5 security concepts • Experience developing cybersecurity automation or scripting for vulnerability management and compliance workflows • Experience with USMC cybersecurity processes and DoD-specific monitoring tools • Experience with Splunk, AWS, OCI, or Azure cloud environments • Experience working in Agile environments • Strong oral and written communication skills • Ability to lead small technical workstreams of up to five analysts • Experience conducting root-cause analysis and supporting cybersecurity incident corrective actions • Understanding of the contractor’s role in supporting the government client • Familiarity with MC eMASS workflows, non-networked connected systems, or AI-enabled cybersecurity capabilities is a plus

🏖️ Benefits

• Flexible time off benefit • Robust learning resources • Learning and development opportunities • Healthcare benefits • Wellness benefits • Financial benefits • Retirement benefits • Family support benefits • Continuing education benefits • Time off benefits • Flexible work arrangements supporting work-life balance • Competitive compensation