OneMain Financial Jobs

468898BR

Auto req ID:

468898BR

Company:

CACI International Inc

Job Code:

IT Information Technology

Job Description:

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans , Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers . If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. Unless specifically stated otherwise, this role is "On-Site"

Cyber Security Analyst

Alexandria, Virginia, United States of America

Type: Full time

Minimum Clearance Required to Start: Secret

Percentage of Travel Required: Up to 10% (Local)

The proposed salary range for this position is: $86,600 - $181,800

The Opportunity:

The company is seeking a Cyber Security Analyst to join their team supporting a Department of Defense (DoD) client. If you are looking for your next career challenge with a highly skilled development team. As a valued member of the team, you will work with the team to ensure that any network or application within the client's purview desiring connectivity to the client's cloud computing environment meets all security requirements and specifications according to DoD Instruction 8510.01 Department of Defense Risk Management Framework (RMF).

Responsibilities:

• Work collaboratively with the ISSM, ISSO, stakeholders, and the team to support cybersecurity efforts (NIPR/SIPR)

• Create and manage RMF artifacts and the entire ATO lifecycle  

• Conduct vulnerability assessments on technologies to verify system security and compliance and assist in remediation efforts  

• Review and analyze GitHub and software vulnerability scans  

• Utilize scripting and development tools to achieve cybersecurity compliance and reporting needs  

• Ensure application, system, environment, or organizational changes do not have an adverse effect on the security posture of the system security compliance and assessment

• Manage security evaluations of information systems and networks and the remediation of security control weaknesses, prepare evaluation reports, and present recommendations

• Monitor and validate vulnerability postures in Microsoft Azure Defender for Cloud, Microsoft XDR and Microsoft Azure Policy and ensure all systems comply with DISA Security Technical Implementation Guidelines (STIG)s and with CSSP requirements

• Ensure and approve Plan of Action and Milestones (POA&M) are in place for vulnerabilities that cannot be remedied at the time of the finding

Qualifications:

Required:

• Must be a U.S. Citizen with an active DoD Secret clearance (at minimum)

• A Bachelor's Degree in Cyber Security, Information Technology, Information Security, or related field.  Equivalent professional experience may be considered in lieu of degree.

• At least two years of relevant Cyber Security experience

• Experience and knowledge in DoD RMF, NIST Controls, and Authorization to Operate (ATO) processes  

• Knowledge of cyber security concepts and tools, such as DISA STIGs and SCAP

• Minimum 2 years’ experience using the DoD Enterprise Mission Assurance Support Service (eMASS) as a system certification and accreditation tracking tool

• Fulfill DoD Manual 8140.03 level Intermediate from the Foundational Qualification Options for the (541) Vulnerability Assessment Analyst work role including applicable certification(s) (e.g._Security+)

• Experience with cloud implementations and environments 

Desired:

• Familiarity with National Institute of Standards (NIST) directives

• Experience implementing NIST 800-53 controls  

• Familiarity with any of the following: FEDRAMP, DISA APL, DevSecOps, SIEM, Microsoft Defender for Cloud

• Familiarity with RMF 2.0 and Continuous ATO

• Experience working with Microsoft Azure environments  

• Experience using vulnerability assessment tools as well as analyzing and interpreting assessment results

• Experience in initial risk assessment activities and ability to assist Authorizing Official risk determination with risk acceptance

• Experience with container technology   

• Operational knowledge of GitHub Advanced Security scanning tools, to include reviewing results of custom software security scans

• Ability to apply principles, theories, and concepts while contributing to the development of new, innovative principles and ideas 

• Good communication skills , both verbal and written

• Strong attention to detail

Pay Range :

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$86,600 - $181,800

Position Title:

Cyber Security Analyst - Alexandria, VA (Secret)

Job Category:

Information Technology

Minimum Education Required:

Bachelors

City*:

Alexandria

State*:

Virginia

Salary Range:

$75,000-$100,000