The Opportunity:
CACI is excited to announce paid internship opportunities for Cyber Security Analysts to support our NASA Consolidated Applications Platforms Services (NCAPS) contract. As a successful candidate, you will conduct information security risk assessments in accordance with the NIST Risk Management Framework for new projects and associated infrastructure and applications. You will assess the effectiveness of internal security controls, participate in the SDLC as both a risk assessor and advisor for best practices, and maintain knowledge of security and privacy laws, industry best practices, and technological changes to advise on potential impacts. Additionally, you will serve as a Security Technical Liaison to project and functional teams and support FISMA audit requirements. Join us in this dynamic role and contribute to the security of NASA's critical applications.

Responsibilities:

• Maintain Application Security Plan (ASP)
• Manage the completion of the risk assessment
• Create Plan of Action & Milestone (POAM)
• Manage Application vulnerability mitigation strategy
• Manage Application contingency plan
• Conduct Firewall Rule Analysis
• Conduct Continuous Monitoring of applications, databases, & systems
• Manage asset inventory
• Perform Compliance monitoring
• Perform File Integrity monitoring
• Perform Log Management
• Provide Monthly reporting and metrics
• Perform Incident/vulnerability response duties
• Conduct Vulnerability Scanning analysis & mitigation tracking
• Conduct Application scanning analysis & mitigation tracking
• Communicate with Security Operations Center (SOC)
• Communicate with Marshall Incident Response Team (MIRT)

Qualifications:

Required: 

• Must be currently enrolled and pursuing an undergraduate or graduate degree in Cyber Security or related area.
• Understanding of what an Information Security role is.
• Working knowledge of the NIST RMF and implementation of NIST SP 800-53 IA Controls.
• Knowledge on performing risk assessments (e.g., evaluate threats, vulnerabilities, likelihood, and impact) and identifying mitigating controls.
• System security planning
• Incident response and handling
• Knowledge with various vulnerability assessment tools such as Nessus, HP WebInspect, HP Fortify, Burpsuite, etc.
• Broad technology background; distributed systems (Linux, Solaris, Windows, enterprise applications (such as databases, SAP, etc.) and application development and architecture (SDLC).
• Understanding of mitigating controls at the systems, network, and application level
• Ability to work both in a team construct and independently.
• Ability to build and maintain constructive working relationships with a diverse community (in and outside of technology) is critical; ability to effectively communicate (both written and verbal) with and influence both technical and non-technical audiences.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Desired:

• Firewall ruleset analysis
• Web application scanning
• Web application & system vulnerability assessment
• Web application static code analysis
• SAP access management security
• Security in agile environments
• Minimum of CompTIA Security+ certification is a plus.
  
  
   

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is: