Information System Security Officer – RMF Analyst

atCACI International IncRemote

Illinois Full-time Cybersecurity / Security EngineerMid-levelSenior$75.2k – $158.1k/year

Posted 15 hours ago

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Oversee the security authorization stance of designated information systems.

• Ensure adherence to DoD cybersecurity standards while facilitating operational readiness and mission achievement.

• Create, sustain, and revise System Security Plans (SSPs).

• Manage Plans of Action and Milestones (POA&Ms) from their identification through to remediation and closure.

• Prepare, coordinate, and submit Authorization to Operate (ATO) documentation.

• Implement continuous monitoring activities in alignment with RMF strategies and security requirements.

• Utilize eMASS to oversee cybersecurity compliance tasks, authorization documentation, and RMF workflows.

• Collaborate with ISSEs, cybersecurity operations teams, and system stakeholders to assess the implementation and efficiency of security controls.

• Formulate Security Assessment Plans (SAPs).

• Assist in coordinating activities related to Security Assessment Reports (SAR).

• Aid in supply chain risk management planning and documentation.

• Contribute to cybersecurity governance initiatives and RMF strategic planning.

• Monitor authorization status, compliance metrics, and remediation efforts to uphold an appropriate security posture.

• Collaborate with cybersecurity architects, engineers, and operations professionals.

⛳️ Requirements

• Active Secret or Top Secret security clearance.

• Fulfillment of DoD 8140 Interim Education Requirements.

• 3–5 years of experience supporting RMF, ATO, or cybersecurity compliance tasks within Department of Defense or federal sectors.

• Practical experience with eMASS.

• Familiarity with NIST SP 800-53 Rev. 5.

• Understanding of DoD Risk Management Framework (RMF).

• Knowledge of continuous monitoring procedures.

• Proven experience in independently developing System Security Plans (SSPs).

• Established ability to manage POA&Ms through remediation and closure.

• Strong analytical, organizational, and problem-solving abilities.

• Capable of effectively communicating with both technical and non-technical stakeholders.

• DoD 8140.03M DCWF Basic Tier Certification: Certified Ethical Hacker (CEH).

• Proficient in Risk Management Framework (RMF).

• Knowledgeable about Authorization to Operate (ATO) processes.

• Experienced with eMASS.

• Skilled in System Security Plans (SSPs).

• Competent in POA&M management.

• Experienced in continuous monitoring.

• Knowledgeable in NIST SP 800-53 Rev. 5.

• Familiar with DoD cybersecurity compliance.

• Experienced in security assessment planning.

• Knowledgeable in Governance, Risk, and Compliance (GRC).

• Proficient in documentation and audit readiness.

• Skilled in risk analysis and remediation tracking.

• Desired: experience with eMASSer or other RMF automation and compliance management tools.

• Desired: experience assisting with cloud-hosted, hybrid, or intricate enterprise authorization boundaries.

• Desired: familiarity with the DoD RMF Knowledge Service and associated cybersecurity guidelines.

• Desired: experience supporting extensive DoD or federal cybersecurity programs.

• Desired: understanding of supply chain risk management principles and practices.

• Desired: experience collaborating across engineering, operations, architecture, and compliance teams.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Software Engineering, Data Science, or a related field (preferred).

• One or more desired DoD 8140.03M DCWF Intermediate Tier certifications, including CEH Practical (CEH-P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+.