Step into a senior role where your expertise helps strengthen risk management across supported systems. This onsite position at Fort Bragg, NC supports DoD and Intelligence Community compliance through disciplined RMF documentation, security reviews, and vulnerability analysis. CACI emphasizes integrity, an environment of trust, and a focus on continuous growth, paired with benefits that support healthcare, financial well-being, and family needs.
What you’ll do
- Manage, maintain, and review Certifications and Accreditation (C&A) documentation for supported Automated Information Systems to ensure compliance with DoD and Intelligence Community RMF standards.
- Maintain working knowledge of DoD and related directives that govern DoD RMF and Intelligence Directive 503.
- Conduct security reviews, scans, evaluations, and risk assessments to identify security risks and assess potential impact from cyber vulnerabilities.
- Evaluate security procedures and support command users in understanding and following command cyber security policies and procedures, producing and maintaining required documentation such as the System Security Plan, Risk Assessment, Plan of Action and Milestones, and the Authority to Operate (Operate) / Authority to Connect.
- Identify systemic security issues using analysis of vulnerability and configuration data.
- Reconcile customer requirements within acceptable risk levels defined by DoD policy, command policy, and generally accepted practices, including recommendations for tools and processes to improve CS initiatives.
- Apply RMF requirements in day-to-day support, responding to inquiries from organization members via email, phone, or in-person.
- Demonstrate appropriate discretion when handling classified or sensitive information.
- Perform and interpret vulnerability scans, recognizing vulnerabilities across security systems.
- Support continuous analysis to identify network and system vulnerabilities.
- Analyze security threats and vulnerabilities, including examples such as buffer overflow, mobile code, cross-site scripting, PL/SQL and injection types, race conditions, covert channel, replay, return-oriented attacks, and malicious code.
- Prepare audit reports documenting technical and procedural findings and provide recommended remediation strategies or solutions.
- Administer, operate, and maintain multiple vulnerability management servers/applications and an RMF web database tool.
Required qualifications
- DoD Top Secret Security Clearance with DCID 6/4 eligibility
- Current DoD 8570 IAT Level II certification
- 4-6 years of cybersecurity (Information Assurance) compliance and vulnerability testing experience
- Experience using COTS/GOTS/DoD CS Tools for security analysis and network scanning
- Vulnerability tool administration and execution capability
- Proficiency with MS Office products
- Exceptional organizational, presentation, and communication skills (verbal and written)
- Strong listening and comprehension skills, with the ability to extract and articulate key concepts and requirements from discussions, documentation, and transcripts
- Experience with handling and marking classified information
- Familiarity with security policies governing storage, access, and transmittal of classified information
- Self-starter who is self-managed, responsive, and dedicated, with a track record of high productivity and meeting deadlines
- Customer service and team player skills
- Ability to maintain initiative, think creatively, and develop innovative methods to solve challenging problems with available manpower and tools
- Ability to adapt with a positive attitude in a fast-paced environment and work cooperatively at multiple organizational levels
Technology and knowledge areas
- Risk Management Framework (RMF)
- Intelligence Directive 503
- PL/SQL, cross-site scripting
- Vulnerability and security scanning; server administration and systems engineering concepts
- RMF web database tool
- Security and system lifecycle management principles, including software security and usability
- COTS/GOTS/DoD CS Tools
- MS Office
Salary, location, and travel
Location: Fort Bragg, NC (onsite)
Salary: $71,500 - $150,200 per year
Travel: Up to 10% (continental US)
Benefits
- Healthcare
- Wellness
- Financial
- Retirement
- Family support
- Continuing education
- Time off benefits
Desired background
- Military background and experience with SOF
- Application security
- Software programming experience
- Current DoD 8570 IAT Level III certification
- B.S. or M.S. in Computer Science, Information Security, Mathematics, or IT related field
Additional opportunity highlights: This role centers on maintaining and reviewing RMF-related Certifications and Accreditation documentation, aligning with DoD and Intelligence Community standards while supporting security reviews, scans, evaluations, and risk assessments.
