Job Details

Information Systems Security Engineer (ISSE)

CACI is seeking an Information Systems Security Engineer (ISSE) to support our Air Force Distributed Ground Systems-Experimental (DGS-X) program at Langley AFB, VA, Robins AFB, GA, and Hanscom AFB, MA.

Responsibilities:

• Provide expert-level security support and guidance to engineering and technical IT-related activities within the organization.
• Continuously monitor all alert queues, triage security alerts, and conduct incident response and remediation efforts.
• Provide the technical support to maintain the confidentiality, integrity, and availability of the AF DCGS.
• Manage the processing of all organizational efforts through the risk management cycle, including closely coordinating and tracking risks, accreditation status, and reporting status across project teams.
• Work with SCAs and associated teams to improve the security of AF systems by reducing risk postures through the identification of risk reductions and mitigations.
• Perform Test and Evaluation (T&E); interview system SMEs; validate physical controls; HW/SW lists; topology and TPPS. In addition, document and provide on-site assessments.
• Perform a QA review of the risk scores and risk assessment reports.
• Ensure processes, enhancements, and sustainment activities are following NIST 800-53.
• Provide engineering services to support testing of SW that is enhanced and subsequently integrated into the AF DCGS as part of the sustainment lifecycle.
• Develop test scripts and conduct testing for the applications sustained within the AF DCGS database. Operational Testing shall ensure the system meets the operational needs of the user community. Throughout test events, the system's information assurance and interoperability shall be assessed.
• Identify information assurance control impacts and likelihoods.
• Prepare a system risk rating and determine risk reduction measures based on information assurance control subject areas.

Qualifications:

• Active TS/SCI security clearance.
• DoD Directive 8570 IAT II certification (Security+ CE or equivalent). CASP or GSLC preferred.
• Bachelor's Degree or higher in computer engineering or in a field related to the computer engineering or computer science disciplines.
• 3-10 years of RMF & ISSO experience, or an associate's degree and 4 years of RMF & ISSO experience.
• Extensive experience in the use of Xacta 360 IA Manager to create System Security Plans (SSP).
• Working knowledge of Intelligence Community Information Assurance policies and regulations and how they relate to the assessment and authorization process.
• Experience authoring and maintaining systems security documentation, including documentation of security mitigations and successful completion of the ICD 503 accreditation process.
• Experience navigating the security and accreditation process to include Assessment & Authorization (A&A) of an IT system to Authority to Operate (ATO).
• Knowledge and experience in generating appropriate security documentation to receive proper accreditation and correcting security shortfalls as they are identified through agency-sponsored reviews.
• Experience with quality data collection techniques.
• Specific knowledge of AF DCGS RMF processes.

• Experience in at least two (2) of the following areas:
• Knowledge of Xacta 360 and Xacta.io Governance, Risk, and Compliance (GRC) automation software.
• Hardware/software security implementation, to include Secure Technical Implementation Guides (STIGs), Secure Content Automation Protocol (SCAP), Evaluate-STIG, ACAS/Nessus Vulnerability and Compliance Scanning tools.
• Air Force Intelligence Community (AF IC) Policies, Plans, and Procedures.
• ITIL v4 Foundation certification.

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.