Senior Cyber Security Engineer
Job Category: Engineering
Time Type: Full time
Minimum Clearance Required to Start: Secret
Employee Type: Regular
Percentage of Travel Required: Up to 50%
Type of Travel: Continental US
Primary Purpose:
Act as technical Cyber SME for multiple projects as an essential part of an integrated engineering team to assist with secure engineering plan development, STIG-compliant technical configurations and installations, compliance testing and reporting, and oversight of compliance during deployment of designed solutions for production use in government networks; develop security plans, policies, and designs.
Duties and Responsibilities:
Provide Security Impact Analyses and Risk Scoring for solutions and system connections/upgrades
Review Security Technical Implementation Guideline (STIG) scores and recommend mitigations
Complete Security Compliance Assessment Program (SCAP) scans and analyze results
Follow RMF, NIST, and US Government guidelines for providing Information Security for network and system assets.
Monitor and participate in Vulnerability Management (VM) of network and system assets
Create, revise, and review system security documentation (System Security Plans [SSP]; Plan of Actions and Milestones [POAMs]; Instructions; Standard Operating Procedures [SOPs]; Tools, Techniques, and Processes, [TTPs]; policies, etc.)
Provide Authorization and Accreditation (A&A) support for assigned projects
Work with System and Network administrators to guide Cyber Security best practices and remediate vulnerabilities
Develop and perform technical presentations for customers
Serve as a technical resource at customer briefings.
Mentor junior engineers and technicians
Serve as technical security lead on projects
Travel to other CACI Locations or Customer Sites as necessary
Requires travel (up to 50%) to CONUS/OCONUS
Understand and adhere to all CACI Ethical and Compliance policies
Proactively ensure a safe work environment and adhere to CACI EH&S policies and procedures
Perform other duties as required
If required, obtain/retain a government security clearance at the level required to perform the duties of the position
Skills and Knowledge:
Knowledge of risk assessment tools, technologies, and methods
Experience planning, researching, and developing security policies, standards, and procedures
Experience/knowledge in accrediting and performing registration activities
Proficient in Microsoft software applications and other software applications as required, including Microsoft SharePoint
Systems integration and lab experience desired
Excellent interpersonal and presentation skills
Good oral and written communication skills
Experience in using drawing tools such as Microsoft Visio or AutoCAD is desired
Desired Certifications: CISSP (or Associate), CASP+ CE, CCNP Security, CISA, GCED, GCIH, CCSP
More About the Role:
The successful candidate will primarily oversee the development of secure engineering and compliance for deploying solutions and providing A&A support to gain customers. Candidate must have strong experience with both Systems and Networking devices, technical asset configurations, STIG, SCAP, and other assessment and reporting tools. The candidate must be able to work with little oversight and possess developed written and verbal communication skills to work effectively with colleagues, drive innovation, and communicate with fellow team members, colleagues, management, and customer leadership.
You’ll Bring These Qualifications:
Ability to travel 50%-75% to customer locations
Bachelor’s Degree in Cybersecurity, Information Assurance (IA), or relevant IT degree with significant cybersecurity-related coursework. An additional four (4) years of relevant experience is allowed instead of a degree.
7 plus years of cybersecurity or information assurance experience, with at least two (2) years leading cyber or IA personnel or teams.
Must meet DoD Approved 8570 certification requirements for IAT-III
These Qualifications Would Be Nice to Have:
Experience working on large projects in a demanding environment
Knowledge of or experience with Army networks
Knowledge of or experience with NETCOM RMF 2.0 requirements
Experience with Cross Domain Solutions and/or Commercial Solutions for Classified (CSFC) approval processes/requirements
What We Can Offer You:
We’ve been named a Best Place to Work by the Washington Post.
Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
We offer competitive benefits and learning and development opportunities.
We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.
For over 60 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.
Company Overview: At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other protected characteristic.