Cybersecurity Engineer / Cybersecurity Subject Matter Expert (SME) – Army Tactical System
Sign up free to see how well your resume matches this role.
What you'll do
- Lead and support Army RMF activities for system authorization, cybersecurity compliance and continuous monitoring efforts.
- Review, analyze, and maintain DISA STIG compliance artifacts, including STIG Viewer checklists (.CKL files), supporting evidence, and remediation status.
- Execute, review, and interpret cybersecurity scans, including SCAP Compliance Checker, ACAS, vulnerability scans, and related assessment results.
- Correlate DISA STIG findings, scan results, vulnerability data, and security assessment findings to identify compliance gaps, assess risk, and establish remediation priorities.
- Develop, review, and maintain cybersecurity documentation, including System Security Plans (SSP), Cybersecurity Strategies, POA&Ms, risk assessments, mitigation plans, and RMF authorization artifacts.
- Maintain cybersecurity records and authorization package data within eMASS in support of IATT, ATO, Assess Only and Continuous Monitoring requirements.
- Coordinate with Government stakeholders, Authorizing Officials (AO), Security Control Assessors (SCA), system engineers, software developers, cloud teams, vendors, and assessors to resolve cybersecurity findings and drive remediation efforts to closure.
- Review Vendor’s cybersecurity deliverables for technical adequacy, compliance, and alignment with Army and DoD cybersecurity requirements.
- Support cybersecurity test events, vulnerability assessments, penetration testing, security reviews, and authorization readiness activities.
- Evaluate cybersecurity risks and provide recommendations to program leadership regarding compliance posture, remediation status, risk acceptance, and authorization impacts.
- Support implementation of new Army and DoD cybersecurity policies, guidance, and requirements and assess impacts to the program.
- Serve as a cybersecurity advisor to program leadership and technical teams on RMF, vulnerability management, compliance, and risk management activities.
What they're looking for
- Active Secret Clearance required to start
- Security+ CE or higher DoD 8140/8570 compliant certification.
- Strong experience with RMF activities for Army or DoD systems and supporting tactical systems through IATT, ATO, and Continuous Monitoring activities.
- Solid knowledge of AR 25-2, DoD RMF, NIST 800-53 security controls, and Army cybersecurity requirements.
- Hands-on experience reviewing DISA STIGs, STIG Viewer checklists, CKL files, and cybersecurity compliance evidence. Identify compliance gaps and remediation priorities.
- Experience developing and maintaining POA&Ms, remediation plans, risk assessments, mitigation plans, and RMF authorization artifacts.
- Ability to work independently with minimal supervision and effectively coordinate with Government personnel, assessors, engineers, software developers, cloud teams, and vendors.
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
The Opportunity:
The Cybersecurity Engineer / SME will support cybersecurity activities for an Army tactical system, with emphasis on Risk Management Framework (RMF), Army cybersecurity compliance, vulnerability management, DISA STIG reviews, cyber scan analysis, and authorization support. This position requires a hands-on cybersecurity professional with strong Army and DoD RMF experience and technical expertise reviewing DIDA STIGs, cybersecurity scans, vulnerability assessments, and authorization artifacts. The ideal candidate will be capable of independently analyzing technical findings, maintaining compliance evidence, supporting eMASS activities, coordinating with stakeholders, and adapting to evolving Army and DoD cybersecurity requirements.
Responsibilities:
Lead and support Army RMF activities for system authorization, cybersecurity compliance and continuous monitoring efforts.
Review, analyze, and maintain DISA STIG compliance artifacts, including STIG Viewer checklists (.CKL files), supporting evidence, and remediation status.
Execute, review, and interpret cybersecurity scans, including SCAP Compliance Checker, ACAS, vulnerability scans, and related assessment results.
Correlate DISA STIG findings, scan results, vulnerability data, and security assessment findings to identify compliance gaps, assess risk, and establish remediation priorities.
Develop, review, and maintain cybersecurity documentation, including System Security Plans (SSP), Cybersecurity Strategies, POA&Ms, risk assessments, mitigation plans, and RMF authorization artifacts.
Maintain cybersecurity records and authorization package data within eMASS in support of IATT, ATO, Assess Only and Continuous Monitoring requirements.
Coordinate with Government stakeholders, Authorizing Officials (AO), Security Control Assessors (SCA), system engineers, software developers, cloud teams, vendors, and assessors to resolve cybersecurity findings and drive remediation efforts to closure.
Review Vendor’s cybersecurity deliverables for technical adequacy, compliance, and alignment with Army and DoD cybersecurity requirements.
Support cybersecurity test events, vulnerability assessments, penetration testing, security reviews, and authorization readiness activities.
Evaluate cybersecurity risks and provide recommendations to program leadership regarding compliance posture, remediation status, risk acceptance, and authorization impacts.
Support implementation of new Army and DoD cybersecurity policies, guidance, and requirements and assess impacts to the program.
Serve as a cybersecurity advisor to program leadership and technical teams on RMF, vulnerability management, compliance, and risk management activities.
Qualifications:
Required:
Active Secret Clearance required to start
Security+ CE or higher DoD 8140/8570 compliant certification.
Strong experience with RMF activities for Army or DoD systems and supporting tactical systems through IATT, ATO, and Continuous Monitoring activities.
Solid knowledge of AR 25-2, DoD RMF, NIST 800-53 security controls, and Army cybersecurity requirements.
Hands-on experience reviewing DISA STIGs, STIG Viewer checklists, CKL files, and cybersecurity compliance evidence. Identify compliance gaps and remediation priorities.
Experience developing and maintaining POA&Ms, remediation plans, risk assessments, mitigation plans, and RMF authorization artifacts.
Ability to work independently with minimal supervision and effectively coordinate with Government personnel, assessors, engineers, software developers, cloud teams, and vendors.
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
The proposed salary range for this position is:
$103,800 - $218,100Company
Company facts come from this company's own listings. We only show what the postings themselves carry.