> Markdown version of [/jobs/ext/4009994-information-systems-security-officer-isso-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/4009994-information-systems-security-officer-isso-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer (ISSO)/Cyber Security Analyst - **Company:** CACI International Inc. - **Location:** Alexandria, VA, United States - **Experience:** Experienced - **Salary:** $72,700.0 - $149,200.0 - **Contract:** Permanent contract - **Skills:** Microsoft Antivirus, Microsoft Azure, Cloud Engineering, Cyber Security, Information Systems, Custom Software, Programming Tools, Github, NIPRNet, Security Content Automation Protocol, Security Information and Event Management, Software Vulnerability Management, Containerization, Information Technology, Tenable Nessus, Devsecops, Plan of Action and Milestones, Vulnerability Analysis - **Published:** October 29, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3479358258&tx=VT6762TYD&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role Required: Must be a U.S. Citizen with an active DoD Secret clearance (at minimum) Typically requires at least 2 years' experience and a B.S. in Information Technology, Information Security, or related field or equivalent professional experience Experience and knowledge in **DoD RMF, NIST Controls, and Authorization to Operate (ATO) processes ** Knowledge of cybersecurity concepts and tools, such as DISA STIGs, SCAP, SCC Tool Minimum 2 years' experience using the DoD Enterprise Mission Assurance Support Service (eMASS) as a system certification and accreditation tracking tool Trained in the use of the ACAS to include how to remedy Information Assurance Vulnerability Management (IAVM) findings DoD Manual 8140.03 level Intermediate from the Foundational Qualification Options for the (541) Vulnerability Assessment Analyst work role including applicable certification(s) (e.g_Security+) Experience with cloud implementations and environments. Desired: Familiarity with National Institute of Standards (NIST) directives Experience implementing NIST 800-53 controls Familiarity with any of the following: FEDRAMP, DISA APL, Reciprocity, DevSecOps, SIEM, Microsoft Defender for Cloud Familiarity with RMF 2.0 and Continuous ATO Experience working with Microsoft Azure environments Experience using vulnerability assessment tools as well as analyzing and interpreting assessment results Experience in initial risk assessment activities and ability to assist Authorizing Official risk determination with risk acceptance Experience with container technology Operational knowledge of GitHub Advanced Security scanning tools, to include reviewing results of custom software security scans ## Description Manage extensive security evaluations of information systems and networks and the remediation of security control weaknesses, prepares evaluation reports, and presents recommendations. Conduct trade-off analyses of products for clients to determine optimal information security solutions. Maintain a high level of familiarity with the major Federal Government Information Security policy guidance and directives. Provide ongoing security training to the client's on-site personnel Ensure the physical environment of the computers and their terminals are properly secured and meets all Operation Security (OPSEC) requirements Conduct structured walk-throughs based on Continuity of Operations Plans to ensure integrity of the network's ability to reconstitute normal system functions including reinstallation of applications after a catastrophic failure Work collaboratively with the ISSM, stakeholders, and the team to support cybersecurity efforts (NIPR/SIPR) Create and manage RMF artifacts and the entire ATO lifecycle Conduct vulnerability assessments on technologies to verify system security and compliance and assist in remediation efforts Review and analyze GitHub and software vulnerability scans Utilize scripting and development tools to achieve cybersecurity compliance and reporting needs Ensure application, system, environment, or organizational changes do not have an adverse effect on the security posture of the system security compliance and assessment Monitor and validate vulnerability postures in Assured Compliance Assessment Solution (ACAS), and ensure all systems comply with DISA Security Technical Implementation Guidelines (STIG)s and with CSSP requirements Ensure and approve Plan of Action and Milestones (POA&M) are in place for vulnerabilities that cannot be remedied at the time of the finding