Cyber Security Specialist

Job Title: Cyber Security SpecialistJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: NoneEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local* * *
The Opportunity:

CACI is seeking a Cyber Security Specialist to support our customer, Global Combat Support System – Marine Corps (GCSS-MC). This senior-level position provides Cyber Security oversight, guidance, and support following the Program Management Office (PMO) requirements.
Responsibilities:

Perform assessment and authorization coordination for STIG testing, advises and assists the customer with Risk Management Framework (RMF), and develops a Plan of Action and Milestones for resolving system deficiencies following DODI 8510.01 and NIST 800-37. The duties of this position include assessing compliance against controls listed in NIST 800-53 Rev5 and supporting the Program Management Office (PMO) associated Assess & Authorize (A&A) records. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at GCSS-MC. The Contractor shall execute a comprehensive assessment, compliance, and validation of the customer system and development environment to ensure compliance with regulations, security, and standards and advise GCSS-MC PMO on system risks, risk mitigation courses of action, and operations. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities.

Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations, and vulnerability assessment reviews using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool, and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool and manual STIG review process. The Cyber Security Specialist will serve as a liaison with network, application, and system administrators to correct identified deficiencies. The Cyber Security Specialist will also review new systems and applications being introduced into the GCSS or Development environment, identify issues, and draft POAM for the government, to include eMASS POAMs as well OPDIR POAM (USMC). The contractor will liaise with the Cyber PMO to ensure systems and application meet the DISA Security Technical Implementation Guides (STIG) standards.

Typical duties include :

- Advise stakeholders on the adequacy of implementation of cybersecurity requirements.

- Provide DoD & MC RMF subject matter expertise to GCSS, including other Contractors, as well as cross functional teams, and assist with the development and execution of the RMF program. Familiarity with MC eMASS Workflows is an added plus.

- Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems, and technologies as they are introduced into the environments.

- Perform risk and vulnerability assessments of IT and IS for authorization; prepare Security POAM (OPDIR) for submission to the Cyber PMO.

- Track and report to Cyber PMO compliance with applicable Cybersecurity regulations and directives. Ensure timely notifications are made to responsible individuals and organizations to prevent lapses in accreditations (e.g., 30, 60, and 90-day notices).

- Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing information security awareness, vulnerabilities, security controls, and threats to support organizational risk management decisions.

- Identify, assess, and advise on cybersecurity control compliance and associated risks.

- Coordinate with Cyber PMO to resolve security issues, A&A, connection approvals, change requests (CR), and waiver requests.

- Perform network, cloud, information systems, hardware, software, and device security assessments, as well as the application and e