Cyber Security Engineer

CACI International

22h•$53,100 - $106,300•Hybrid

About The Position

CACI is seeking a Cyber Security Engineer to support our USTRANSCOM customer. This role is ideal for a cybersecurity professional with hands-on experience in the Risk Management Framework (RMF), NIST guidelines, security assessments, and implementation of security controls. You will directly contribute to achieving Authorization to Operate (ATO), reducing organizational risk, and strengthening mission-critical defense capabilities across DoD environments.

Requirements

Active Secret security clearance (or ability to obtain).
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (or 4+ years of equivalent experience).
1–3 years of hands-on experience with RMF processes and the ATO lifecycle.
Experience with software/application vulnerability scanning.
Experience with DISA STIG implementation.
Experience with tools such as eMASS, ACAS, SCC Tool.
Familiarity with FedRAMP, DISA APL, or DevSecOps concepts.
Strong technical writing skills for security documentation.
Ability to work independently and collaboratively.
Required at hire: Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP.
Required within 6 months: SecurityX (IASAE transition preparation).

Nice To Haves

Experience with Fortify or other SAST tools.
Familiarity with CMMC or NIST 800-171 frameworks.
Knowledge of SSDLC and Security Engineering principles.
Understanding of DevSecOps, Agile methodologies, and Zero Trust Architecture.
Previous experience supporting federal government or DoD customers.
Ability to apply innovative methods and contribute to new security solutions.
Highly desired: CASP+, CISSP

Responsibilities

Manage the full RMF accreditation lifecycle and maintain continuous compliance for DoD computing environments.
Create, manage, and maintain RMF artifacts throughout the ATO lifecycle.
Generate and review System Security Plans (SSPs), network diagrams, security architecture documentation, and compliance reports.
Develop and track POA&Ms to support remediation efforts.
Assist the ISSM with continuous monitoring activities.
Perform hands-on security assessments of enclave and network infrastructure devices, primarily within Windows environments.
Design, implement, and validate security controls in accordance with NIST 800-53, DISA STIGs, DFARS, and CMMC frameworks.
Conduct software vulnerability scanning and triage findings across application portfolios.
Interpret and apply DISA STIG requirements using SCC Tool, eMASS, and ACAS.
Work with development, operations, and cybersecurity teams to embed security throughout the SDLC.
Identify and recommend process improvements to strengthen security and enhance productivity.
Provide best-practice guidance for secure system and software development.