Cybersecurity Vulnerability Engineer

CACI • Fayetteville, NC

6d • $85,800 - $180,200 • Onsite

About The Position

CACI is hiring an experienced Cybersecurity Vulnerability Engineer to support a Department of Defense customer. The position supports the customer on site at Fort Bragg, North Carolina, and requires an active DoD TS/SCI clearance. The successful candidate is expected to be a self-starter with advanced-level capabilities.

The engineer deploys and maintains vulnerability scanning across network, application, cloud, container, and endpoint environments; validates findings and assesses exploitability; and develops remediation guidance and secure baselines. The role also automates and integrates security workflows with CI/CD, cloud platforms, infrastructure-as-code, and ticketing systems; supports remediation validation and incident response; and improves asset discovery, scanning coverage, and exposure-management capabilities. The engineer assesses risks in AI/ML/LLM platforms and aligns work with NIST and industry frameworks.

CACI describes a culture centered on integrity, character, innovation, trust, and mission support. Employees have access to flexible time off and learning resources. The company offers comprehensive benefits and learning and development opportunities. The proposed salary range is $85,800–$180,200, with final compensation influenced by factors including location, contract labor categories and wage rates, experience, skills, education, and certifications.

Requirements

• Active DoD TS/SCI clearance.
• Bachelor’s degree and a minimum of 7 years’ experience in cybersecurity, or equivalent.
• Strong understanding of operating systems, networking, cloud platforms, and application architectures.
• Hands-on experience with vulnerability scanners, configuration assessment tools, and security automation.
• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Ability to read and understand exploit code, advisories, and configuration weaknesses.
• Strong troubleshooting and systems analysis skills.
• Experience integrating security tools with CI/CD, cloud APIs, or infrastructure-as-code workflows.
• Experience with container security, Kubernetes, or cloud-native scanning.
• Familiarity with attack-path analysis or exposure-management platforms.
• Experience building custom detection logic or validating proof-of-concept exploits.
• Knowledge of AI/ML/LLM platform security or emerging technology risks.

Nice To Haves

• DoD 8570/8140-compliant certification, such as CISSP, SecurityX, CySA+, or GIAC.

Responsibilities

• Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments.
• Perform authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
• Validate vulnerabilities through technical analysis, proof-of-concept testing, and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack-path feasibility.
• Conduct root-cause analysis for recurring or systemic vulnerabilities and propose engineering-level fixes.
• Develop remediation playbooks, secure configuration baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
• Integrate vulnerability detection into CI/CD, infrastructure-as-code pipelines, and pre-production environments.
• Support remediation validation through rescanning, configuration checks, and targeted testing.
• Enhance attack-surface discovery for internet-facing, ephemeral, and cloud-native assets.
• Identify coverage gaps in scanning, asset visibility, or control validation and propose improvements.
• Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
• Support incident response during vulnerability surge events through rapid scanning and technical remediation assistance.
• Maintain accurate asset-to-vulnerability mappings to support analytics and automation.
• Evaluate emerging technologies and support adoption of new scanning and exposure-management capabilities.
• Assess vulnerabilities in AI/ML/LLM platforms and emerging technologies.
• Ensure alignment with NIST and industry frameworks, including NIST SP 800-40, NIST SP 800-53, and CIS Controls.

Benefits

• Flexible time off benefit.
• Learning resources and learning and development opportunities.
• Comprehensive benefits, including healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior