Cyber Security Lead Sr – OCONUS - PCS

CACI International

21h

About The Position

CACI is seeking a knowledgeable Cybersecurity Manager with experience overseeing teams fulfilling customer requirements for system security posture assessment, certification process execution and continuous monitoring. The successful candidate will advise and influence capability development from a cybersecurity perspective, work closely with program management staffs to plan and carry out project execution, advise government customers on cybersecurity related matters, and manage technical staff carrying out day-to-day support for capabilities deployed on various classified and unclassified networks. Primary Purpose: To provide authoritative Cybersecurity direction for system accreditation through the development, engineering, integration, and testing of all components of the system at various Air Force sites. You will work with other members of the CACI program team and Government Cybersecurity personnel to ensure the security of the system in all environments during both development and operations as well as supporting efforts to obtain Authority to Operate (ATO), during external IT audits, and through continuous monitoring. Additionally, you will support the use of emerging technologies in CACI and customer environments, prepare reports and required deliverables, and attend customer and staff meetings. Facilitation of investigations of network device and information security incidents to determine extent of compromise to national security information and automated information systems, generation of security architecture documentation, critical written and verbal analyses of previously generated security architecture documentation, and vulnerability/risk assessments will also be required. Design and implementation of plans of action and milestones (POAMs) to remediate findings from vulnerability and risk assessments.

Requirements

• Knowledge of risk assessment tools, technologies, and methods including eMASS
• Knowledge of vulnerability management tools and techniques, including ESS (Trellix) and ACAS (Nessus)
• Knowledge to support designing secure networks, systems, and application architectures
• Knowledge to support planning, researching, and developing security policies, standards, and procedures
• Ability to communicate network security issues to peers and customers
• Proficient in Microsoft software applications and other software applications as required, including Microsoft SharePoint
• Systems integration knowledge
• Excellent interpersonal and presentation skills
• Good oral and written communications skills
• Secret clearance required with ability to obtain Top Secret if necessary
• Bachelor’s degree in technology and/or information systems related discipline desired (will consider experience in lieu of degree) and 10 or more years of experience
• Minimum of Secret cleared and eligible for SCI access
• 3+ years serving as an Information Systems Security Manager (ISSM)
• 10+ years recent experience generating and implementing System Security Accreditation/ICD 503 packages for DoD and/or IC Customers
• 10+ years recent experience establishing security processes, practices and principles for communication network connected systems
• 10+ years recent experience with NIST SP 800-53, CNSSI 1253, and FISMA requirements.
• DoD 8140/8570 IAM Level III certifications

Nice To Haves

• Excellent verbal and written communications for technical and security related topics
• Self-motivated and self-directed
• Experience with eMASS
• Experience in the accreditation of Cross Domain Solutions
• Use of network security vulnerability assessment tools including ACAS - NESSUS, SCAP, ESS (Trellix) and Windows Defender
• Knowledge of DoD/IC Information Assurance Vulnerability Management (IAVM) and Configuration Management processes

Responsibilities

• Manage cybersecurity related projects and budgets, coordinate with Program Managers and end customers to prioritize tasking, and provide guidance to technical staff performing cybersecurity related work.
• Provide full Assessment & Authorization (A&A) support and technical security guidance in all phases of the system accreditation process and/or Risk Management Framework (RMF)
• Manage the development and maintain A&A packages for information systems based on the customers’ policy and guidance
• Manage development, maintain, and provide security review of information security plans for computers, networks, and information systems
• Provide estimated levels of effort and schedules for cybersecurity product certification activities in proposal and project planning phases
• Manage, research and identify security vulnerabilities and provide guidance to mitigate risks to information systems undergoing the A&A process
• Manage the assessment security system needs and provide corrective actions into a coherent security strategy
• Review and analyze systems architecture diagrams and networks
• Manage the performance of cybersecurity testing by conducting reviews
• Lead Technical Exchange Meetings to facilitate information security solutions
• Convey knowledge and security focused comprehensive solutions to technically complex systems and challenges
• Provide inputs to development efforts to prepare for trends in cybersecurity requirements evolution and enforcement

Benefits

• Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
• We offer competitive compensation, benefits and learning and development opportunities.
• Our broad and competitive mix of benefits options is designed to support and protect employees and their families.
• At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level