Cybersecurity Vulnerability Engineer

CACI • Fort Bragg, NC

5d • Onsite

About The Position

CACI is hiring an experienced Cybersecurity Vulnerability Engineer to support a Department of Defense customer. This advanced-level position supports the customer onsite at Fort Bragg, North Carolina, and requires an active DoD TS/SCI clearance. The engineer will operate and improve vulnerability management capabilities across network, application, cloud, container, and endpoint environments, validate and assess vulnerabilities, and help engineering teams prevent and remediate security weaknesses.

The role includes building automated security workflows, integrating vulnerability detection into CI/CD and infrastructure-as-code pipelines, improving asset and attack-surface visibility, and supporting remediation validation and incident response during vulnerability surges. The engineer will also assess risks in AI/ML/LLM platforms and emerging technologies and ensure alignment with NIST guidance and CIS Controls.

Requirements

• Active DoD TS/SCI clearance.
• Bachelor's degree and at least 7 years of experience in cybersecurity or equivalent.
• Strong understanding of operating systems, networking, cloud platforms, and application architectures.
• Hands-on experience with vulnerability scanners, configuration assessment tools, and security automation.
• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Ability to read and understand exploit code, advisories, and configuration weaknesses.
• Strong troubleshooting and systems analysis skills.
• Experience integrating security tools with CI/CD, cloud APIs, or infrastructure-as-code workflows.
• Experience with container security, Kubernetes, or cloud-native scanning.
• Familiarity with attack-path analysis or exposure-management platforms.
• Experience building custom detection logic or validating proof-of-concept exploits.
• Knowledge of AI/ML/LLM platform security or emerging technology risks.

Nice To Haves

• DoD 8570/8140-compliant certification, such as CISSP, SecurityX, CySA+, or a GIAC certification.

Responsibilities

• Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments.
• Perform authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
• Validate vulnerabilities through technical analysis, proof-of-concept testing, and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack-path feasibility.
• Conduct root-cause analysis for recurring or systemic vulnerabilities and propose engineering-level fixes.
• Develop remediation playbooks, secure configuration baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
• Integrate vulnerability detection into CI/CD, IaC pipelines, and pre-production environments.
• Support remediation validation through rescanning, configuration checks, and targeted testing.
• Enhance attack-surface discovery for internet-facing, ephemeral, and cloud-native assets.
• Identify coverage gaps in scanning, asset visibility, or control validation and propose improvements.
• Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
• Support incident response during vulnerability surge events through rapid scanning and technical remediation assistance.
• Maintain accurate asset-to-vulnerability mappings to support analytics and automation.
• Evaluate emerging technologies and support adoption of new scanning and exposure-management capabilities.
• Assess vulnerabilities in AI/ML/LLM platforms and emerging technologies.
• Ensure alignment with NIST and industry frameworks, including NIST SP 800-40, NIST SP 800-53, and CIS Controls.

Benefits

• Flexible time off benefit.
• Learning and development opportunities and resources.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior