Cyber Security Specialist

CACI International Inc

. Perform assessment and authorization coordination for STIG testing .

Posted 9/17/2026full-timeRemote • Virginia • United StatesMid-LevelSenior💰 $75,200 - $158,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Risk Management Framework (RMF) activities, cybersecurity compliance assessments, and vulnerability management within DoD environments. Proficient in utilizing tools such as ACAS and Nessus for security evaluations and developing automation for compliance workflows.

Highest-signal resume keywords

Risk Management Framework (RMF)Assured Compliance Assessment Solution (ACAS)NIST 800-53 Rev. 5 ComplianceSecurity+ CertificationVulnerability Assessment and Compliance Scanning

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity AssessmentVulnerability ManagementCompliance AssessmentRisk AssessmentAutomation DevelopmentRoot-Cause AnalysisDocumentation DevelopmentSecurity EvaluationSTIG TestingIncident Response

Soft Skills

Excellent Communication SkillsLeadershipCollaboration

Tools & Technologies

NessusACASEMASSSplunkAWSOCIAzureSCAP

Certifications & Qualifications

Security+ Certification

Industry Keywords

DoD CybersecurityUSMC CybersecurityNIST ComplianceDODI 8500.01DODI 8510.01FedRAMPFISMACybersecurity PostureContinuous MonitoringAgile Environments

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityOracleSplunk

About the role

Key responsibilities & impact

Perform assessment and authorization coordination for STIG testing
Advise and assist the customer with Risk Management Framework (RMF) activities
Develop Plans of Action and Milestones (POA&Ms) for system deficiencies
Assess compliance against NIST 800-53 Rev. 5 controls
Support PMO Assess & Authorize records
Perform IT system assessment, compliance, and validation activities
Advise the GCSS-MC PMO on system risks and mitigation courses of action
Perform security evaluations and vulnerability assessment reviews using ACAS, Nessus, and SCAP tools
Identify applicable STIGs and conduct manual STIG reviews
Liaise with network, application, and system administrators to correct deficiencies
Review new systems and applications and draft eMASS and OPDIR POA&Ms
Ensure systems and applications meet DISA STIG standards
Advise stakeholders on cybersecurity requirement implementation
Provide DoD and Marine Corps RMF subject matter expertise
Develop and maintain documentation for networks, cloud environments, information systems, and technologies
Perform risk and vulnerability assessments for authorization
Track and report cybersecurity compliance to the Cyber PMO
Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan
Coordinate security issues, A&A, connection approvals, change requests, and waiver requests
Perform network, cloud, information system, hardware, software, and device security assessments
Validate system patching and scanning reviews
Provide cybersecurity mitigation strategy expertise
Develop and implement vulnerability mitigation processes and procedures
Validate ongoing effectiveness of security measures
Analyze cybersecurity posture and provide reports to stakeholders
Lead small technical workstreams and develop automation for ACAS, STIG, and control analysis
Conduct root-cause analysis and support cybersecurity incident corrective actions
Collaborate with the USMC Cyber Operations Group during penetration testing and vulnerability assessments

Requirements

What you’ll need

Bachelor’s degree in Cyber Security, Information Technology, or Computer Science with experience in Cyber Security
BS/BA and at least 3–5 years of ISSO experience supporting US Marine Corps or DoD programs
5+ years’ experience with the Risk Management Framework (RMF)
5+ years’ experience using Assured Compliance Assessment Solution (ACAS)/Tenable Nessus Vulnerability Scanner
5+ years’ experience with vulnerability and compliance assessment scanning tools and reporting
5+ years of United States government security policies, including NIST 800-53 Rev 4/5 and NIST 800-171
Knowledge of DODI 8500.01 and DODI 8510.01
Security+ certification required
Experience with all RMF steps and execution within a demanding USMC environment
Experience developing cybersecurity automation or scripting for vulnerability management and compliance workflows
Experience with USMC cybersecurity processes and DoD-specific monitoring tools
Experience with Splunk, AWS, OCI, or Azure cloud environments
Experience working in Agile environments
Excellent oral and written communication skills
Ability to apply FedRAMP, FISMA, NIST, CNSSI, and Oracle Cloud IL4/IL5 security concepts
Ability to lead small technical workstreams of up to five analysts
Experience conducting root-cause analysis and supporting corrective action efforts for cybersecurity incidents
Familiarity with MC eMASS workflows is an added plus
Familiarity with developing automation or AI-enabled capabilities is an added plus
Up to 10% local travel

Benefits

Comp & perks

Flexible time off benefit
Robust learning resources
Healthcare benefits
Wellness benefits
Financial benefits
Retirement benefits
Family support benefits
Continuing education benefits
Time off benefits
Flexible work arrangements