[Hiring] Information System Security Officer / RMF Analyst @CACI International

Role Description

Join CACI and play a critical role in safeguarding mission-essential Department of Defense systems. As an Information System Security Officer (ISSO) / RMF Analyst, you will manage the security authorization posture of assigned information systems, ensuring compliance with DoD cybersecurity requirements while supporting operational readiness and mission success.

In this role, you'll work alongside a highly skilled team of cybersecurity architects, engineers, and operations professionals, gaining hands-on experience with modern Risk Management Framework (RMF) tools and processes. You'll directly contribute to Authorization to Operate (ATO) efforts, continuous monitoring activities, and cybersecurity governance initiatives while building a clear path toward more senior Governance, Risk, and Compliance (GRC) leadership opportunities.

Responsibilities:

• Develop, maintain, and update System Security Plans (SSPs) for assigned systems.
• Manage Plans of Action and Milestones (POA&Ms) from identification through remediation and closure.
• Prepare, coordinate, and submit Authorization to Operate (ATO) packages in support of system authorization efforts.
• Execute continuous monitoring activities in accordance with established RMF strategies and security requirements.
• Utilize eMASS to manage cybersecurity compliance activities, authorization artifacts, and RMF workflows.
• Partner with Information System Security Engineers (ISSEs), cybersecurity operations teams, and system stakeholders to validate security control implementation and effectiveness.
• Develop Security Assessment Plans (SAPs) and support Security Assessment Report (SAR) coordination activities.
• Assist with supply chain risk management planning and documentation.
• Support cybersecurity governance initiatives and RMF strategic planning efforts.
• Track authorization status, compliance metrics, and remediation activities to ensure systems maintain an appropriate security posture.

Qualifications

• An active Secret or Top Secret security clearance.
• Meets DoD 8140 Interim Education Requirements.
• 3-5 years of experience supporting RMF, ATO, or cybersecurity compliance activities within Department of Defense or federal environments.
• Hands-on experience using eMASS.
• Working knowledge of:
  • NIST SP 800-53 Rev. 5
  • DoD Risk Management Framework (RMF)
  • Continuous Monitoring processes
• Demonstrated experience independently developing System Security Plans (SSPs).
• Proven ability to manage POA&Ms through remediation and closure.
• Strong analytical, organizational, and problem-solving skills.
• Ability to communicate effectively with technical and non-technical stakeholders.
• DoD 8140.03M DCWF Basic Tier Certification:
• Certified Ethical Hacker (CEH)
• Risk Management Framework (RMF)
• Authorization to Operate (ATO) Processes
• eMASS
• System Security Plans (SSPs)
• POA&M Management
• Continuous Monitoring
• NIST SP 800-53 Rev. 5
• DoD Cybersecurity Compliance
• Security Assessment Planning
• Governance, Risk, and Compliance (GRC)
• Documentation and Audit Readiness
• Risk Analysis and Remediation Tracking

Requirements

• Experience using eMASSer or other RMF automation and compliance management tools.
• Experience supporting cloud-hosted, hybrid, or complex enterprise authorization boundaries.
• Familiarity with the DoD RMF Knowledge Service and related cybersecurity guidance.
• Experience supporting large-scale DoD or federal cybersecurity programs.
• Understanding of supply chain risk management principles and practices.
• Experience collaborating across engineering, operations, architecture, and compliance teams.
• eMASSer Automation.
• Cloud Security and Hybrid Environments.
• Supply Chain Risk Management.
• DoD RMF Knowledge Service.
• Enterprise Cybersecurity Programs.
• Cybersecurity Architecture Collaboration.
• Security Assessment Report (SAR) Coordination.
• Advanced GRC Practices.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Software Engineering, Data Science, or a related field.
• One or more of the following DoD 8140.03M DCWF Intermediate Tier certifications:
  • CEH Practical (CEH-P)
  • RCCE Level 1
  • Cloud+
  • CPTE
  • FITSP-A
  • GCED
  • GCIH
  • GCSA
  • GICSP
  • GSEC
  • PenTest+
  • Security+

Benefits

• A culture of integrity.
• An environment of trust.
• A focus on continuous growth.
• Comprehensive benefits such as healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Company Description

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.