Job Title: Information Systems Security Engineer (ISSE)
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: Top Secret
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US
* * *
The Opportunity:CACI is seeking an experienced
Cybersecurity / Information Assurance (IA) professional to support
Navy Medicine Online (NMO) and its mission-critical information systems.
Working collaboratively with the NMO Information System Security Manager (ISSM), Information System Security Officer (ISSO), and government cybersecurity stakeholders, you will help assess, strengthen, and maintain the security posture of multiple computing environments. This position will conduct and review technical security assessments, identify vulnerabilities, threat vectors, potential threat actors, and areas of non-compliance with established cybersecurity and Information Assurance requirements, and recommend appropriate mitigation strategies.
You will support the development, implementation, and documentation of formal cybersecurity programs, policies, procedures, and controls while monitoring ongoing compliance. The role will actively support the
Risk Management Framework (RMF) process in accordance with Defense Health Agency (DHA) requirements, including
Annual Security Reviews (ASRs), Authority to Operate (ATO) activities, and Independent Verification and Validation (IV&V) reviews.
Artificial Intelligence (AI) is also an important component of this environment. You will leverage approved AI capabilities to enhance cybersecurity activities, automation, analysis, and operational efficiency while partnering with the ISSM and ISSO teams to help maintain the security posture of AI-assisted development across NMO.
Responsibilities:- Conduct and review technical security assessments across multiple computing environments to identify vulnerabilities, threat vectors, security risks, and non-compliance with applicable cybersecurity standards and requirements.
- Support the implementation and ongoing execution of the Risk Management Framework (RMF), including security control assessments, documentation, remediation activities, and continuous monitoring.
- Support Annual Security Reviews (ASRs), Authority to Operate (ATO) activities, and IV&V assessments in accordance with DHA, NIST, and applicable Department of Defense cybersecurity requirements.
- Develop, implement, maintain, and document cybersecurity policies, procedures, controls, and formal security programs.
- Evaluate identified vulnerabilities and security risks and recommend practical mitigation and remediation strategies.
- Support vulnerability management, penetration testing, security assessments, Data Loss Prevention (DLP), incident response, and Zero Trust security initiatives.
- Evaluate network architectures, protocols, firewalls, IDS/IPS technologies, encryption solutions, cloud environments, and associated security vulnerabilities.
- Partner with ISSMs, ISSOs, system administrators, developers, engineers, and government stakeholders to maintain and continuously improve system security.
- Leverage approved AI platforms, models, programming, and scripting capabilities to support cybersecurity analysis, automation, documentation, and operational activities.
- Assess cybersecurity considerations associated with AI-assisted software development and help ensure AI-enabled solutions are implemented in accordance with established security requirements.
- Participate in cybersecurity incident response activities, including analysis, documentation, remediation, and recommendations for preventing recurrence.
- Prepare and maintain security documentation, assessment results, findings, remediation plans, and other cybersecurity artifacts required to support compliance and authorization activities.
- Communicate cybersecurity risks, findings, recommendations, and remediation requirements clearly to technical and non-technical stakeholders.
Qualifications:Required- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related technical discipline.
- Professional cybersecurity certification such as CISSP, CISM, CISA, CEH, or a comparable industry-recognized certification.
- Experience conducting Annual Security Reviews (ASRs), IV&V activities, or comparable security assessments using NIST frameworks and cybersecurity standards.
- Experience supporting Risk Management Framework (RMF), security authorization, assessment, compliance, or continuous monitoring activities.
- Experience with vulnerability management, security assessments, penetration testing, Data Loss Prevention (DLP) best practices, and Zero Trust principles.
- Strong knowledge of network architectures and protocols, firewalls, IDS/IPS technologies, encryption, and associated vulnerabilities.
- Familiarity with cloud security concepts, controls, and best practices.
- Experience assessing cybersecurity risks and developing or implementing appropriate mitigation strategies.
- Proficiency with AI platforms and models, including experience applying AI and programming or scripting capabilities to automation, analysis, or technical workflows.
- Strong understanding of cybersecurity incident response methodologies and practices.
- Demonstrated analytical, troubleshooting, and problem-solving skills with strong attention to detail.
- Strong written and verbal communication skills with the ability to communicate cybersecurity concepts and risks to both technical and non-technical audiences.
- Ability to collaborate effectively within multidisciplinary teams while also working independently with minimal supervision.
- Active Top Secret security clearance required.
Desired- Familiarity with Search Processing Language (SPL), Microsoft Visio, eMASS, ALM, and Confluence.
- Prior experience supporting the U.S. Navy, Defense Health Agency (DHA), Bureau of Medicine and Surgery (BUMED), Department of Defense, or other military organizations.
- Experience supporting Navy Medicine operations and mission environments.
- Knowledge or experience related to Individual and Unit Readiness, medical waiver processing, and Global Health Engagements.
- Experience securing or assessing AI-enabled applications, AI-assisted development environments, or emerging technologies within regulated or government environments.
What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.
An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
Since this position can be worked in more than one location, the range shown is the national average for the position.
The proposed salary range for this position is:
$75,200-$158,100
CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
