Cybersecurity Vulnerability Engineer
CACI International7 days ago
Base Salary
$86k - $180k/yr
Responsibilities
- Deploy and maintain vulnerability scanning tools across network, application, cloud, container, and endpoint environments.
- Perform authenticated and unauthenticated scans, tune configurations, validate vulnerabilities, and assess exploitability.
- Conduct root-cause analysis and propose engineering-level fixes for recurring or systemic vulnerabilities.
- Develop remediation playbooks, secure configuration baselines, hardening standards, detection logic, and proof-of-concept exploit validation.
- Automate vulnerability workflows using Python, PowerShell, Bash, APIs, CI/CD integrations, cloud platforms, and ticketing systems.
- Integrate vulnerability detection into CI/CD, infrastructure-as-code pipelines, and pre-production environments.
- Validate remediation through rescanning, configuration checks, and targeted testing.
- Improve attack-surface discovery, asset visibility, scanning coverage, and exposure-management capabilities.
- Support incident response during vulnerability surge events and maintain accurate asset-to-vulnerability mappings.
- Assess AI/ML/LLM platform security and ensure alignment with NIST and CIS frameworks.
Requirements
- Active DoD TS/SCI clearance is required.
- Bachelor's degree with a minimum of seven years of cybersecurity experience or equivalent experience.
- Strong understanding of operating systems, networking, cloud platforms, and application architectures.
- Hands-on experience with vulnerability scanners, configuration assessment tools, and security automation.
- Proficiency with Python, PowerShell, or Bash.
- Ability to interpret exploit code, security advisories, and configuration weaknesses.
- Experience integrating security tools with CI/CD, cloud APIs, or infrastructure-as-code workflows.
- Experience with container security, Kubernetes, or cloud-native scanning.
- Familiarity with attack-path analysis or exposure-management platforms.
- Knowledge of AI/ML/LLM platform security or emerging technology risks.
- DoD 8570/8140-compliant certification is preferred, such as CISSP, SecurityX, CySA+, or GIAC.
- Strong troubleshooting and systems analysis skills are required.
Benefits
- Competitive compensation and comprehensive healthcare, wellness, financial, retirement, family support, continuing education, and time-off benefits.
- Flexible time off and learning and development resources.
- Full-time, regular employee position supporting a Department of Defense customer.
- On-site work at Fort Bragg, North Carolina, with up to 10% travel within the continental United States.
Tech Stack
Categories
About CACI International
CACI International is a public government contractor that delivers enterprise IT, cybersecurity, electronic warfare, space, and intelligence solutions to U.S. defense, intelligence, and federal civilian customers. It provides systems engineering, software and data services, and mission support across C4ISR and business systems, primarily through long-term government contracts. Founded in 1962 and headquartered in Reston, Virginia, CACI trades on the NYSE under the ticker CACI.