Security Technical Implementation Guide (STIG) Analyst jobs in United States
cer-icon
Apply on Employer Site
company-logo

CACI International Inc · 2 hours ago

Security Technical Implementation Guide (STIG) Analyst

CACI International Inc is seeking a Security Technical Implementation Guide (STIG) Analyst to play a critical role in the EITaaS program for the Department of the Air Force. The role involves identifying, tracking, reporting, and mitigating STIG findings, as well as providing remediation guidance and creating custom reports for Air Force bases.

Information TechnologyService IndustrySoftware
check
Comp. & Benefits
badNo H1BnoteSecurity Clearance RequirednoteU.S. Citizen Onlynote

Responsibilities

Conduct monthly reviews of Tenable and SteelCloud STIG reports
Analyze STIG data to remediation actions and identify responsible parties to conduct those actions
Review updates to DISA STIGs when new ones are published
Document comprehensive action plans for identified STIGs
Prioritize STIGs based on severity, potential impact, and exploitability
Develop and maintain custom STIG reports tailored for individual Air Force bases
Clearly communicate which STIGs will be remediated by the Enterprise and the expected timelines
Provide specific, actionable feedback to Air Force bases and leadership on how to remediate STIGs they are responsible for
Ensure recommendations are practical, aligned with Air Force policies, and feasible within the base’s resource constraints
Work closely with base IT teams, Enterprise security teams, and other stakeholders to ensure effective STIG management
Participate in regular meetings and briefings to discuss STIG trends, remediation progress, and emerging threats
Engage with the Cyber Security Dashboard team to identify improvements to automated messaging regarding STIGs
Stay current with the latest STIG trends, threat intelligence, and best practices in STIG management
Recommend process improvements and tool enhancements to streamline STIG assessment and remediation efforts

Qualification

STIG managementSecurity+ certificationTenable STIG scanning toolsExcelPivot tablesSTIG ViewerCLK filesAnalytical skillsProblem-solving skillsWritten communicationVerbal communicationTeamworkDetail-orientedOrganizational skills

Required

Secret Clearance
8+ Years of relevant experience (Bachelor's Degree in applicable field may be substituted for 5 years of experience)
Security+ certification (or equivalent)
Minimum of 3 years of experience in STIG management or a related cybersecurity role
Experience with Tenable or similar STIG scanning tools
Familiarity with Air Force IT systems and security protocols is a plus
Working Knowledge of Excel and pivot tables
Experience with STIG Viewer and CLK files
Strong analytical and problem-solving skills
Excellent written and verbal communication skills
Ability to work independently and as part of a team
Detail-oriented with strong organizational skills

Preferred

Experience in creating and managing custom STIG reports
Knowledge of Air Force or DoD security standards and regulations
Proven track record of successful STIG remediation projects

Benefits

Healthcare
Wellness
Financial
Retirement
Family support
Continuing education
Time off benefits

Company

CACI International Inc

company-logo
At CACI International Inc (NYSE: CACI), our 25,000 talented and dynamic employees are ever vigilant in delivering distinctive expertise and technology to meet our customers’ greatest challenges in national security.

Funding

Current Stage
Public Company
Total Funding
$1B
2025-05-21Post Ipo Debt· $1B
2003-01-10IPO

Leadership Team

leader-logo
John Mengucci
President & CEO
linkedin
leader-logo
Darryl W Burke
Senior Vice President / Air Force Client Executive
linkedin
Company data provided by crunchbase