Cyber​/Information Assurance Analyst; Journeyman

Job Title:

Cyber/Information Assurance Analyst (Journeyman)
Job Category:
Information Technology Time Type:
Full time Minimum Clearance Required to Start:
Top Secret Employee Type:
Regular Percentage of

Travel Required:

Up to 10%
Type of Travel:
Local*
*
* The Opportunity:

CACI is seeking a Journeyman Cyber/Information Assurance Analyst for the Global Mission Operations Support (GMOS) contract, supporting the Department of State.

This role offers a unique opportunity to enhance national security through advanced IT solutions. You will collaborate with experienced professionals in an innovative environment, guiding a high-performing team to deliver excellence. The GMOS contract aims to provide world-class IT support by modernizing and maintaining applications and infrastructure using an integrated IT Service Management approach. Join us to make a meaningful impact on a program of national importance.

Responsibilities:

Plan, implement, and monitor comprehensive security measures for the protection of computer networks, systems, and applications across the CA IT enterprise aligned with NIST Cybersecurity Framework Maintain and update the enterprise service catalog ensuring comprehensive security documentation for all operational services including security classifications, compliance status, and risk assessments

Provide expert security guidance and technical consultation for infrastructure architecture initiatives, ensuring alignment with Department of State security standards, FISMA requirements, and NIST 800-53 controls

Ensure engineering designs and technical solutions incorporate security best practices throughout the system development lifecycle, validating compliance with DOS security policies and STIGsImplement, configure, and validate security controls in physical data centers, virtual hosting environments, and cloud platforms including access controls, network segmentation, and encryption mechanisms

Respond rapidly to computer security breaches, incidents, and vulnerabilities by conducting thorough investigations, performing forensic analysis, and coordinating containment and remediation activities

Coordinate security compliance activities for network engineering services ensuring secure connectivity and encrypted communications across 350+ domestic and international facilities

Conduct regular vulnerability assessments, security scans, and compliance audits using industry-standard tools to identify security weaknesses and generate detailed remediation recommendations

Support Authority to Operate (ATO) processes and Risk Management Framework (RMF) activities including security control assessments and Plan of Action and Milestones (POA&M) management

Collaborate with IT service delivery teams, infrastructure engineers, and Government security personnel to integrate security throughout IT operations and promote security-conscious culture

Qualifications:

Required:

Bachelor's degree + 4 years of experience in related fields, such as cybersecurity, information assurance, network security, systems security engineering, or IT security operations; equivalencies considered.

Active Top Secret Clearance Proven experience with information security frameworks including NIST 800-53, Risk Management Framework (RMF), FISMA compliance, and Federal security authorization processes

Demonstrated knowledge of cybersecurity principles, security controls implementation, vulnerability management, and incident response procedures

Strong understanding of network security technologies including firewalls, IDS/IPS, VPNs, network segmentation, and cloud security (AWS, Azure)
Excellent analytical and problem-solving skills with experience using security assessment tools such as Nessus, Qualys, or ACASDesired:

Prior experience supporting federal agencies, especially the Department of State Professional security certifications such as Certified Information Systems Security Professional (CISSP), CompTIA Security+, Certified Ethical Hacker (CEH), or GIAC Security Essentials (GSEC)
Knowledge of Security Technical Implementation Guides (STIGs), CIS Benchmarks, FedRAMP authorization processes, and SIEM tools (Splunk, Arc Sight, QRadar)

Experience with Dev Sec Ops  practices-What You Can Expect: A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An…