Mid Security Information Assurance Engineer

CACI•Denver, CO

10d•Onsite

About The Position

Serve as a security engineer embedded with an Agile program delivering GEOINT capabilities to the National Geospatial-Intelligence Agency (NGA). Work on-site at a Government facility, side by side with mission stakeholders and system owners. Engineer security into modern, cloud-native systems rather than bolting it on after the fact. Play a direct role in achieving and maintaining system authorizations for mission-critical capabilities. This position is contingent upon contract award.

Requirements

TS/SCI Security Clearance with ability to obtain Polygraph
Bachelor's degree in Cybersecurity, Computer Science, or a related technical discipline (equivalent experience accepted).
4+ years of security engineering or information assurance experience.
Experience implementing NIST RMF controls on DoD or IC systems.
Hands-on experience with STIG hardening, ACAS/Nessus, and security remediation.
DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent).
Ability to work on-site at a Government facility.

Nice To Haves

Experience securing Kubernetes, containers, or cloud environments (AWS/C2S).
Experience integrating security scanning into CI/CD pipelines.
Prior experience supporting NGA or the Intelligence Community.

Responsibilities

Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
Perform system hardening, vulnerability assessment, and remediation across development and production environments.
Support security assessment and authorization activities in coordination with Government ISSMs and assessors.
Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure.
Advise development teams on secure design, secure coding, and security architecture decisions.
Document security engineering artifacts supporting ATO and continuous monitoring.