Information Systems Security Engineer; ISSE) Remote; State

Position: Information Systems Security Engineer (ISSE) Remote (Any State)
Location: Northern

*
* The Opportunity:

** CACI is seeking an experienced
** Cybersecurity / Information Assurance (IA) professional
** to support
** Navy Medicine Online (NMO)
** and its mission-critical information systems.  Working collaboratively with the NMO Information System Security Manager (ISSM), Information System Security Officer (ISSO), and government cybersecurity stakeholders, you will help assess, strengthen, and maintain the security posture of multiple computing environments. This position will conduct and review technical security assessments, identify vulnerabilities, threat vectors, potential threat actors, and areas of non-compliance with established cybersecurity and Information Assurance requirements, and recommend appropriate mitigation strategies.  

You will support the development, implementation, and documentation of formal cybersecurity programs, policies, procedures, and controls while monitoring ongoing compliance. The role will actively support the
** Risk Management Framework (RMF)
** process in accordance with Defense Health Agency (DHA) requirements, including
** Annual Security Reviews (ASRs), Authority to Operate (ATO) activities, and Independent Verification and Validation (IV&V) reviews**.  Artificial Intelligence (AI) is also an important component of this environment. You will leverage approved AI capabilities to enhance cybersecurity activities, automation, analysis, and operational efficiency while partnering with the ISSM and ISSO teams to help maintain the security posture of AI-assisted development across NMO.  

## Responsibilities:  
* Conduct and review technical security assessments across multiple computing environments to identify vulnerabilities, threat vectors, security risks, and non-compliance with applicable cybersecurity standards and requirements.
* Support the implementation and ongoing execution of the
** Risk Management Framework (RMF)**, including security control assessments, documentation, remediation activities, and continuous monitoring.
* Support
** Annual Security Reviews (ASRs), Authority to Operate (ATO) activities, and IV&V assessments
** in accordance with DHA, NIST, and applicable Department of Defense cybersecurity requirements.
* Develop, implement, maintain, and document cybersecurity policies, procedures, controls, and formal security programs.
* Evaluate identified vulnerabilities and security risks and recommend practical mitigation and remediation strategies.
* Support vulnerability management, penetration testing, security assessments, Data Loss Prevention (DLP), incident response, and Zero Trust security initiatives.
* Evaluate network architectures, protocols, firewalls, IDS/IPS technologies, encryption solutions, cloud environments, and associated security vulnerabilities.
* Partner with ISSMs, ISSOs, system administrators, developers, engineers, and government stakeholders to maintain and continuously improve system security.
* Leverage approved AI platforms, models, programming, and scripting capabilities to support cybersecurity analysis, automation, documentation, and operational activities.
* Assess cybersecurity considerations associated with AI-assisted software development and help ensure AI-enabled solutions are implemented in accordance with established security requirements.
* Participate in cybersecurity incident response activities, including analysis, documentation, remediation, and recommendations for preventing recurrence.
* Prepare and maintain security documentation, assessment results, findings, remediation plans, and other cybersecurity artifacts required to support compliance and authorization activities.
* Communicate cybersecurity risks, findings, recommendations, and remediation requirements clearly to technical…