Cybersecurity Software Engineer

CACI•Fairfax, VA

19h•Onsite

About The Position

CACI is looking to hire a Cybersecurity Software Engineer to join our Spectral Cyber team supporting the production of high-quality software applications to support the U.S. Navy mission. The ideal candidate will support the U.S. Navy Spectral Program. Spectral is a seven-year $1.2B program to provide the U.S. Navy's next-generation signals intelligence, electronic warfare, and information operations software technologies. We are seeking someone with technical experience who is highly skilled in cyber engineering to be responsible for toolset design, implementation, automation, and optimization of Spectral enterprise-wide security solutions. Desired cyber engineering skillsets will be responsible for continuous development of secure software solutions and hardened mission applications. The ideal candidate brings hands-on cyber engineering experience with cyber analytics and reverse engineering tactics on Kubernetes infrastructure, who thrives in fast-paced, complex environments, and has a proven track record of technical advancements in cyber engineering, cybersecurity engineering, analysis, and modern software deliverables.

Requirements

Bachelor's degree in computer science, software engineering, cyber engineering, systems engineering, information technology, or a related field.
5+ years’ experience in cyber engineering, at least 2 years with modern software technologies.
Demonstrate Kubernetes security engineering, secure SDLC deployment, and cloud-native security.
Hands-on technical experience with cyber engineering toolsets and deployments, to include SIEM, SAST, DAST, SCA, and vulnerability exposure technologies integrations and use cases.
Knowledge of Zero Trust tools, PaaS artifact generation via automation and continuous monitoring.
Working IaC, PaaS, and mission application knowledge, metrics reporting, and telemetry pipelines.
Active TS/SCI and an ability to obtain the required polygraph.
Sec+, or an ability to obtain within 90 days of onboarding.
Experience in at least one scripting language, and knowledge in Ansible playbooks.
Working knowledge in network protocols, TCP/IP stack, firewalls, and packet inspection tools.

Nice To Haves

More than one industry certification (CISSP, CEH, AWS), or equivalent.
SANs or CKA in progress
Knowledge in DevSecOps pipelines and tools.
Experience container scanning and policy-as-code.
Knowledge in STIG/SRG and control engineering automation.

Responsibilities

Automate cybersecurity tools within the infrastructure as code (IaC) for on-prem and distributed platforms and mission applications with end-to-end integrated Zero Trust capability.
Engineer security controls into the IaC, platform as a service (PaaS), and mission applications, automate and streamline outputs for IAM, encryption, logging, and monitoring compliance.
Automate hardening of IaC, PaaS, and mission applications leveraging STIG/SRGs, CIS benchmarks.
Support secure software deployments, containerized platforms and mission applications.
Contribute to cybersecurity tools pipeline integration, enforcement, and automate tool outputs into dynamic decision-making dashboards.
Engineer security controls into the IaC, PaaS, and mission applications to modernize and rapidly produce body of evidence for continuous delivery, monitoring, updates, and improvements.
Streamline vulnerability remediation outcomes and engineer continuous system resiliency, adaptability, drift correction, and responsiveness to updates.
Write Ansible playbooks and scripts using developer tools and repositories.
Enable system patch management enforcement, SBOM, RBOM, and artifact generation.
Cross-functional collaboration with software development, IT, DevOps, hardware/engineering teams, and customer to continuously integrate and improve security posture throughout the SDLC.