The Opportunity:
CACI is seeking a skilled Cyber Security Engineer to support the design, implementation, and maintenance of secure systems and networks. The successful candidate will work closely with CACI's development and IT teams to integrate security best practices, identify and mitigate security vulnerabilities, and ensure compliance with industry standards. You’ll contribute to strengthening the security posture of critical infrastructure and systems supporting CACI operations.
Responsibilities:
- Translate Risk Management Framework (RMF) categorization results and applicable security control baselines into implementable and testable system security requirements allocated across hardware, software, and networks.
- Develop and maintain security artifacts/documentation, authorization boundary diagrams, data flow diagrams, hardware/software lists, and PPSM registrations.
- Analyze ACAS/Nessus and STIG/SCAP results and assist system administrators with resolving failed security controls and mitigating identified vulnerabilities.
- Provide full Assessment & Authorization (A&A) support and technical security guidance in all phases of the system authorization process and/or Risk Management Framework (RMF)
- Support STIG implementation, compliance verification, and audit readiness.
- Provide security-focused insights and technical support for network, infrastructure, and system architecture.
- Translate and communicate technical risks and requirements between technical and non-technical stakeholders
- Collaborate with cross-functional engineering teams to design, implement, and sustain secure system architectures across the development and delivery lifecycle.
- Interpret and explain vulnerability scan results (e.g., from Nessus, Security Center) to technical teams.
- Identify remediation strategies through configuration, design changes, or process updates.
- Recommend and assist in implementing corrective actions to address failed RMF controls and findings.
- Maintain and administer cybersecurity tools such as Nessus, Tenable Security Center, Evaluate-STIG.
- Embed security into engineering processes, design reviews, configuration baselines, and build pipelines.
Qualifications:
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (will consider relevant experience in lieu of a degree) and 8+ years of cybersecurity engineering experience.
- Must have an active Top Secret/SCI clearance to start.
- US Citizenship is required.
- Working knowledge of NIST SP 800-53 Rev 5, NIST SP 800-37, CNSSI 1253, DISA STIGs and SRGs, as well as familiarization with eMASS and/or XACTA.
- Demonstrated experience carrying systems through a full Risk Management Framework (RMF) authorization cycle; Categorization through Authority to Operate (ATO) and into Continuous Monitoring.
- Experienced in hardening operating systems (Windows Server, RHEL/Linux) and applications to align with STIG requirements and compliance obligations.
- Proficient in security toolsets, including vulnerability assessment platforms (Nessus/Tenable Security Center, ACAS), SIEM platforms, and endpoint security tooling.
- Strong documentation skills, specifically as it relates to generating security documentation in support of the system authorization process.
- Exceptional problem-solving abilities with a proactive approach to identifying and mitigating security risks.
- Demonstrated expertise in cybersecurity engineering activities, including cybersecurity analysis, vulnerability assessments, risk assessments, and remediation efforts.
- Certifications: Security+ and either Linux+ or Microsoft Certified Technology Specialist (MCTS); capable of performing at Information Assurance Technical Level II as per DoD 8140 guidelines.
- Proficient in security toolsets, such as vulnerability assessment tools (e.g., Nessus, Qualys), intrusion detection systems, and SIEM platforms.
- Knowledge of compliance frameworks, such as NIST, JSIG, and DAAPM, and the ability to implement security controls in alignment with these standards.
- Ability to work independently and within a team, adapting to dynamic security challenges.
Desired:
- Advanced certifications, such as CISSP, CEH, or Certified Cloud Security Professional (CCSP).
- Familiarity with DevSecOps practices and integrating security into CI/CD pipelines.
- Container and Kubernetes security experience; familiarity with Iron Bank or Platform One.
- Understanding of data encryption techniques, FIPS 140-3 validated implementations, and secure data handling practices.
- Prior experience on the assessment side (Security Control Assessor, IV&V, or Navy Qualified Validator).
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
The proposed salary range for this position is:
$85,800 - $180,200Skills Required
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or relevant experience in lieu of a degree
- 8+ years of cybersecurity engineering experience
- Active Top Secret/SCI security clearance at start
- U.S. citizenship
- Working knowledge of NIST SP 800-53 Rev. 5, NIST SP 800-37, CNSSI 1253, DISA STIGs, and SRGs
- Familiarity with eMASS and/or XACTA
- Experience carrying systems through the full RMF authorization cycle, from categorization through ATO and continuous monitoring
- Experience hardening Windows Server and RHEL/Linux operating systems and applications to STIG requirements
- Proficiency with vulnerability assessment platforms including Nessus, Tenable Security Center, ACAS, or Qualys
- Experience with SIEM platforms, intrusion detection systems, and endpoint security tooling
- Strong security documentation skills supporting system authorization processes
- Experience with cybersecurity analysis, vulnerability assessments, risk assessments, and remediation
- Security+ certification and either Linux+ or Microsoft Certified Technology Specialist (MCTS) certification
- Ability to perform at Information Assurance Technical Level II under DoD 8140 guidelines
- Knowledge of NIST, JSIG, and DAAPM compliance frameworks
- Ability to work independently and collaboratively in dynamic security environments
- Advanced certification such as CISSP, CEH, or Certified Cloud Security Professional (CCSP)
- Familiarity with DevSecOps and integrating security into CI/CD pipelines
- Container and Kubernetes security experience, including familiarity with Iron Bank or Platform One
- Understanding of encryption, FIPS 140-3 validated implementations, and secure data handling
- Prior assessment-side experience as a Security Control Assessor, IV&V specialist, or Navy Qualified Validator
CACI International Inc Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about CACI International Inc and has not been reviewed or approved by CACI International Inc.
-
Healthcare Strength — Pay is supported by a broad set of health-plan options across multiple national carriers, with telemedicine and tax-advantaged accounts included. Dental and vision choices are also described as multi-option, which strengthens overall coverage breadth.
-
Leave & Time Off Breadth — Flexible Time Off is available for many salaried-exempt roles, while hourly roles accrue PTO, creating multiple time-off pathways by employment class. Paid disability coverage, fixed holidays, and paid leave programs (including parental leave and other leave types) further round out time-off and leave coverage.
-
Retirement Support — Retirement support includes a 401(k) match structure described as 50% up to 8% of pay (effective 4%) and an Employee Stock Purchase Plan with a discount. Tuition reimbursement and certification support also add to the overall rewards package that complements core retirement benefits.
CACI International Inc Insights
What We Do
CACI’s approximately 23,000 talented employees are vigilant in providing the unique expertise and distinctive technology that address our customers’ greatest enterprise and mission challenges. Our culture of good character, innovation, and excellence drives our success and earns us recognition as a Fortune World's Most Admired Company. As a member of the Fortune 1000 Largest Companies, the Russell 1000 Index, and the S&P MidCap 400 Index, we consistently deliver strong shareholder value. Visit us at www.caci.com.
