Hybrid Information Assurance Engineer

at CACI International Inc

• Job title: Information Assurance Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $82,100 - $172,400 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, TypeScript
• Location requirements: Hybrid, Denver, United States

About the role

• Information Assurance Engineer working with CACI's SAFFIRE team on critical Intelligence solutions. Collaborating with teams to maintain software security and assist national security missions.

Responsibilities

• Maintain accurate reporting and documentation of software security platform identifiers (SPIDs), supporting the ATO Accreditation lifecycle.
• Participate in systems design process to ensure implementation of appropriate systems security requirements using applicable baseline security controls (NIST) as one of the sources for security requirements.
• Analyze technical information to determine the best cyber protection technologies; AND recommend implementations for software programs.
• Perform technical analysis to determine the system security posture impact level, evaluate assigned security controls, conduct a technical security assessment and establish roadmaps for mitigation of vulnerabilities, and produced artifacts to successfully achieve an Authority to Operate from an Authorizing Official.
• Perform assessment and compliance activities by using the assessment tools and procedures within the Xacta IA Manager to manage security compliance and risk, upload artifacts, and track projects as they flow through the RMF process.
• Interface with the Program Management Office (PMO) and Systems Team lead while completing security controls implementation, self-compliance tests, security test plans, and creating/updating the Plan of Actions and Milestones (POA&M).
• Provide final approval of all account creation request ensuring the proper documents and certificates are included; perform annual verification.

Requirements

• Active TS/SCI security clearance with CI Polygraph
• Experience with evaluating Information Assurance compliance of a system against current RMF and expertise DoW Cybersecurity policies as outlined in NIST SP 800-37 and 800-53, rev 4.
• Experience with vulnerability and compliance assessment scanning tools and reporting, along with intrusion detection technologies, intrusion prevention technologies, and Host-Based Security System (HBSS)
• DOD Directive 8570 IAT II certification (Security+ or equivalent).
• Experience managing the security accreditation of several platforms supporting DoW and/or Intelligence Community workflows.
• Comfortable briefing key stakeholders, government program office, and government security professionals on timelines, milestones, and current security posture.

Benefits

• healthcare
• wellness
• financial
• retirement
• family support
• continuing education
• time off benefits