Cloud Cyber Engineer (Linux)

CACI International•Sterling, VA

4d•$75,200 - $158,100

About The Position

CACI/BITS is seeking a Cyber Security Engineer to support the Makalu contract as part of a modern, fast-paced agile software development team. Cloud security engineers are integral to the development team and must adapt to program needs. The role reviews software, hardware, and infrastructure changes; supports system accreditation and continuous monitoring through the risk management framework; maintains security documentation; and helps develop cyber monitoring, hardening, and response plans for a large program with multiple applications. The engineer researches, designs, tests, and implements cybersecurity features for demanding environments. The role calls for a holistic systems-level approach, drawing on software development, system administration, networking, and security to help applications meet security requirements for systems bridging security domains. The engineer also helps software developers understand zero-trust architecture in a multi-releasability environment. The position requires an active TS/SCI clearance with Polygraph, at least five years of Linux/cloud-based development experience, and a bachelor's degree in a related field (or seven or more years of relevant experience without a related degree). Travel is up to 10% within the continental United States. The proposed salary range is $75,200–$158,100.

Requirements

Active TS/SCI clearance with Polygraph.
At least 5 years of Linux/cloud-based development experience.
Bachelor's degree in information systems, systems engineering, electrical engineering, information technology, or a related field; alternatively, 7 or more years of relevant experience without a related degree.
At least 5 years of relevant experience.
Understanding of engineering in development and operational environments.
Understanding of information assurance principles and organizational requirements.
Experience with Department of Defense or Intelligence Community system security control requirements.
Understanding of information security systems engineering principles and IT security technologies, such as firewalls, encryption, and proxies.
Experience with security.

Responsibilities

Review audit logs and create mitigation and corrective action plans.
Use forensic tools to reconstruct attacks and determine how to correct vulnerabilities.
Work with development teams to create, maintain, and monitor data connections, NPE security certificates, and firewall connection requests.
Apply cloud, network, and security best practices while meeting application goals and minimizing security risk.
Continually implement and improve DevSecOps processes in a Linux/cloud-based development environment.
Capture, refine, and help prioritize requirements based on risk, engineering principles, and mission requirements.
Architect security infrastructure and provide enhanced security architectures, development tools, and information systems to support secure missions.
Provide Information System Owners with guidance, requirements understanding, and technical security engineering options.
Conduct capability-based security analysis of system security architectures, identify vulnerabilities, and suggest mitigation alternatives.
Participate in information-system design, development, and implementation to ensure compliance with required security features and safeguards.
Perform security planning, assessment, risk analysis and management, certification, and awareness activities for system and network operations.
Evaluate scan results and work with system developers and administrators to eliminate or mitigate findings.
Generate certification and accreditation documentation and artifacts, such as System Security Plans and Network Interface Planning Documents, for import or upload to the SNOW tool.
Propose information-system categorizations based on the types of information processed, in coordination with DAO Representatives and Information System Owners.
Coordinate early with Security Control Assessors during engineering design on security controls, tradeoffs, and related decisions.