Vulnerability Management Engineer

CACI International • Hampton, VA

4d • $75,200 - $158,100 • Onsite

About The Position

Join the Vulnerability Management team as a hands-on cybersecurity professional responsible for identifying, assessing, prioritizing, and driving remediation of vulnerabilities across an enterprise environment. Support the security of mission-critical systems by leveraging enterprise vulnerability management technologies, including the Assured Compliance Assessment Solution (ACAS), to identify and assess security weaknesses. Work closely with cybersecurity, infrastructure, system administration, and application teams to validate findings, coordinate remediation efforts, and reduce organizational risk. Apply knowledge of vulnerability management, security assessment, Linux, enterprise security technologies, and DoD security requirements to support a mature and effective vulnerability management program. Contribute to the continuous improvement of vulnerability management processes, reporting, automation, and risk-based remediation practices.

Requirements

• Active Top Secret/SCI security clearance.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field; relevant cybersecurity experience may be substituted for the degree requirement.
• Minimum 5 years of relevant vulnerability management experience.
• DoD 8140/8570 IAT Level II certification, such as Security+ or equivalent.
• Demonstrated experience utilizing ACAS for vulnerability management, including scan configuration, vulnerability analysis, reporting, and remediation validation.
• Knowledge of enterprise security technology

Responsibilities

• Configure, manage, and troubleshoot ACAS vulnerability scans, including scan policies, targets, credentials, schedules, and scan configurations across enterprise environments.
• Conduct authenticated and unauthenticated vulnerability scans across Windows, Linux, network, and other enterprise assets.
• Analyze and interpret ACAS scan results to identify, validate, and prioritize vulnerabilities based on severity, exploitability, asset criticality, and organizational risk.
• Investigate vulnerability findings and distinguish true positives from false positives through technical validation and analysis.
• Troubleshoot scan failures, credential issues, connectivity problems, and incomplete or inaccurate vulnerability results.
• Validate vulnerability remediation through follow-up scanning, configuration review, or other appropriate technical verification methods.
• Work with system owners, engineers, administrators, and other stakeholders to communicate vulnerability findings and coordinate remediation activities.
• Track vulnerabilities through the remediation lifecycle and ensure findings are addressed within established remediation timelines and service-level agreements.
• Develop and maintain vulnerability management reports, dashboards, metrics, and remediation status reports for technical teams and leadership.
• Support the management of vulnerability exceptions, risk acceptances, compensating controls, and remediation extensions in accordance with organizational policies.
• Correlate vulnerability findings with asset inventory, system ownership, configuration information, and security controls to improve the accuracy and effectiveness of remediation efforts.
• Apply vulnerability scoring and prioritization methodologies, including CVSS, CISA Known Exploited Vulnerabilities (KEV), vendor advisories, and threat intelligence, to support risk-based remediation decisions.
• Assess vulnerabilities and security configurations on Linux systems, including troubleshooting authenticated scans and supporting remediation activities.
• Support compliance and security assessment activities involving STIGs, DoD security requirements, vulnerability remediation requirements, and security baselines.
• Identify opportunities to improve vulnerability management processes through automation, scripting, workflow optimization, and integration with enterprise security technologies.

Benefits

• flexible time off
• robust learning resources
• competitive compensation
• benefits and learning and development opportunities
• comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level