CACI bv · 3 weeks ago
Information Systems Security Engineer (Multiple Levels)
CACI is looking for talented Information Systems Security Engineers around the Fort Meade, Maryland area. The role involves facilitating sub-projects through the Risk Management Framework (RMF), performing technical security assessments, and ensuring compliance with Information Assurance standards.
ConsultingEducationTraining
Responsibilities
Facilitate sub-projects as they go through the Risk Management Framework (RMF) accreditation life cycle
Support the periodic system security scans as required by policy and the RMF
Validate and verify system security requirement definitions and analyze system security designs
Perform technical security assessments of computing environments to identify points of vulnerability, and then recommend mitigation strategies for those that do not comply with established Information Assurance (IA) standards
Qualification
Required
Bachelor's (BA) degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required
TS/SCI with Polygraph
Seven (7) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity – or eleven (11) years' experience with no BA
DoD 8140.03 compliance with IASAE Level 2
Fourteen (14) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity - or eighteen (18) years' experience with no BA
DoD 8140.03 compliance with IASAE Level 2 and CISSP Certification
Twenty (20) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity - or twenty-four (24) years' experience with no BA
DoD 8140.03 compliance with IASAE Level 3 is required
Information Systems Security Engineering Professional (ISSEP) and CISSP Certifications
A Master's degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline may be substituted for two (2) years' of experience, bringing the requirement to eighteen (18) years
Preferred
Experience manually reviewing network diagrams, network device configurations, termination points for VPNs, and a working knowledge of software TLS security
Able to maintain a flexible and non-traditional RMF review of secure networks to assess and prescribe countermeasures for secure communications e.g. analog radio, mobile cellular, remote kits, software/hardware-based VPN solutions and VDI technologies
Familiar with applying different standards and security frameworks to include CIS benchmarks, FIPS 140-2, DISA Stigs, CNSA cryptographic suite compliance, etc
Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments
Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components
Supported the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
Applied knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
Supported security planning, assessment, risk analysis, and risk management
Identified overall security requirements for the proper handling of Government data
Performed system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements
Provided security planning, assessment, risk analysis, and risk management
Recommended system-level solutions to resolve security requirements
Supported the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
Benefits
Healthcare
Wellness
Financial
Retirement
Family support
Continuing education
Time off benefits
Company
CACI bv
CACI levert, implementeert en beheert bedrijfskritische oplossingen voor het Hoger Onderwijs: het StudentInformatieSysteem OSIRIS en LISA voor zaakgericht werken.
Funding
Current Stage
Growth StageCompany data provided by crunchbase