Cyber Security Specialist at CACI
Stafford, VA
$75,200–$158,100from the description
Aug 10, 2026
Stafford, VA
Sep 24, 2026
What this job asks for AI summary
This role supports a DoD Marine Corps enterprise system (GCSS-MC) by performing cybersecurity assessment and authorization activities under the Risk Management Framework, including STIG assessments, vulnerability scanning, POA&M development, and continuous monitoring. The position also leads a small team of analysts and develops automation for compliance and vulnerability management workflows. It suits an experienced ISSO/cybersecurity professional with deep DoD/USMC RMF and ACAS/Nessus expertise.
Senior level · 5+ years · Bachelor's required · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 12, 2026. It is a model, not a headcount.
Why we read it this way (6)
No clearance is required to start, per the posting's explicit 'Minimum Clearance Required to Start: None' statement, though the role supports a DoD/USMC program.
The posting lists 3-5 years of ISSO experience and 5+ years of RMF/ACAS experience as separate requirements; the overall years minimum is set to 5 reflecting the dominant experience gate.
Oracle Cloud IL4/IL5 appears in the required qualifications section alongside FedRAMP/FISMA/NIST concepts; it is treated as a hard gate accordingly.
Splunk, AWS, OCI, and Azure appear in a single bullet within the required qualifications block but are framed as 'experience with … or' alternatives rather than all being individually mandatory; they are marked preferred to reflect the disjunctive framing.
Agile experience and AI/automation familiarity are explicitly called out as preferred or 'added plus' items.
MC eMASS Workflows familiarity is called 'an added plus' in the narrative but eMASS POAMs are referenced as a core duty throughout the responsibilities section; eMASS is marked required based on its prominence in the duties.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.