Senior Cyber Automation Engineer - ISSE

CACI International•Sterling, VA

5d•$98,500 - $206,800•Hybrid

About The Position

As a Senior Cyber Automation Engineer - ISSE, you will perform design, development, and testing activities of new automation tools in support of enterprise security requirements. Your responsibilities will include system hardening, preparing comprehensive assessment testing procedures, conducting system vulnerability scanning and mitigation, performing system maintenance and configuration, and ensuring thorough documentation. You will support the engineering team by providing direct input on the information system design to obtain and/or maintain a successful Authorization to Operate (ATO). You will perform in-depth analysis of various security hardening guides (DISA STIGs, CIS Benchmarks, vendor guides, SANS, etc.) to ensure security control coverage is addressed in the scanning methodology.

Requirements

An active TS/SCI clearance with polygraph is required.
Must be able to attain a current certification compliant with DoD 8570 IAM or IAT level 2 within 6 months of hire.
Bachelor’s degree in Computer Science, Cyber Engineering, Information Assurance, Information Security System Engineering, or equivalent.
Seven (7) years of directly related experience in cyber engineering or a related field.
Experience with Tenable products regarding vulnerability and compliance scanning
Experience with one scripting language (XML, Perl, Ruby, Python, Bash, JavaScript)
Experience with reviewing and integrating CIS and DISA security guidance
Knowledge of Windows and Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts is required
Designing and developing new cyber systems, applications, and solutions.
Conducting vulnerability assessments and security evaluations of new technologies.
Implementing and testing prototypes and proof-of-concept solutions.
Integrating and deploying new cyber solutions into enterprise environments.
Collaborating with cross-functional teams to deliver complex projects.
Preparing comprehensive documentation for new cyber systems and solutions.

Nice To Haves

Proficient in Microsoft Application tools (i.e., Excel and PowerPoint).
Experience with Sharepoint, Confluence, JIRA.
Experience with developing test plans for information systems.
Demonstrated system administration experience with Linux (Red Hat, CentOS) and/or Windows.
Experience with DevOps.
Familiarity with code quality and code analyzing security tools.
Knowledge of and proficiency in the use of virtualization and cloud technologies
Knowledge of Nessus Attack Scripting Language (NASL)
Audit log review: Ability to query and perform analysis in Splunk.
Experience within the Intelligence Community.

Responsibilities

Conduct research on emerging technologies, vulnerability information, and innovative solutions to enhance enterprise-wide cyber systems and networks.
Design and develop new cyber systems, applications, and solutions that meet the organization’s security requirements.
Create prototypes and proof-of-concept solutions to demonstrate the feasibility and effectiveness of new cyber technologies.
Perform rigorous testing and validation of new cyber systems and applications to ensure they meet performance, security, and compliance requirements.
Oversee the integration and deployment of new cyber solutions into the enterprise environment, ensuring minimal disruption to operations.
Conduct vulnerability assessments and security evaluations of new systems using standardized tools (e.g., Nessus, DISA STIGs) to identify and mitigate potential risks.
Prepare comprehensive documentation, including design specifications, testing reports, and user manuals, to support the implementation and maintenance of new cyber solutions.
Continuously monitor and evaluate the performance of deployed cyber systems, identifying areas for improvement and implementing enhancements as needed.
Work closely with cross-functional teams, including developers, system administrators, and security analysts, to ensure the successful delivery of new cyber solutions.
Engage with customers and stakeholders to gather requirements, provide updates on project progress, and ensure that new solutions align with business objectives.
Ensure that all new cyber systems and solutions comply with relevant regulations, standards, and policies (e.g., NIST, ICD 503).