CACI is offering paid Internship opportunities as a Cyber Security Analyst supporting their NASA Consolidates Applications Platforms Services (NCAPS) contract. The successful candidate will perform information security risk assessments, assess internal security controls, participate in the SDLC, and advise on best practices. They will also maintain knowledge of security regulations, advise on technological impacts, serve as a technical liaison, and support FISMA audit requirements.
Requirements
- Working knowledge of the NIST RMF and implementation of NIST SP 800-53 IA Controls.
- Knowledge on performing risk assessments (e.g., evaluate threats, vulnerabilities, likelihood, and impact) and identifying mitigating controls.
- System security planning
- Incident response and handling
- Knowledge with various vulnerability assessment tools such as Nessus, HP Web Inspect, HP Fortify, Burp suite, etc.
- Broad technology background; distributed systems (Linux, Solaris, Windows, enterprise applications (such as databases, SAP, etc.) and application development and architecture(SDLC).
- Understanding of mitigating controls at the systems, network, and application level.
Responsibilities
- Maintain Application Security Plan (ASP)
- Manage the completion of the risk assessment
- Create Plan of Action & Milestone(POAM)
- Manage Application vulnerability mitigation strategy
- Conduct Firewall Rule Analysis
- Conduct Continuous Monitoring of applications, databases, & systems
- Perform Compliance monitoring
Other
- Understanding of what an Information Security role is.
- Minimum of CompTIA Security+ certification is a plus.
- Ability to work both in a team construct and independently.
- Ability to build and maintain constructive working relationships with a diverse community(in and outside of technology) is critical; ability to effectively communicate (both written and verbal) with and influence both technical and non-technical audiences.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
