Cyber Security Engineer
CACI International IncAbout the role
The Opportunity:
CACI is seeking a Cyber Security Engineer to support our USTRANSCOM customer. This role is ideal for a cybersecurity professional with hands-on experience in the Risk Management Framework (RMF), NIST guidelines, security assessments, and implementation of security controls. You will directly contribute to achieving Authorization to Operate (ATO), reducing organizational risk, and strengthening mission-critical defense capabilities across DoD environments
Responsibilities:
RMF & Compliance Management
Manage the full RMF accreditation lifecycle and maintain continuous compliance for DoD computing environments.
Create, manage, and maintain RMF artifacts throughout the ATO lifecycle.
Generate and review System Security Plans (SSPs), network diagrams, security architecture documentation, and compliance reports.
Develop and track POA&Ms to support remediation efforts.
Assist the ISSM with continuous monitoring activities.
Technical Security Implementation
Perform hands-on security assessments of enclave and network infrastructure devices, primarily within Windows environments.
Design, implement, and validate security controls in accordance with NIST 800-53, DISA STIGs, DFARS, and CMMC frameworks.
Conduct software vulnerability scanning and triage findings across application portfolios.
Interpret and apply DISA STIG requirements using SCC Tool, eMASS, and ACAS.
Collaboration & Process Improvement
Work with development, operations, and cybersecurity teams to embed security throughout the SDLC.
Identify and recommend process improvements to strengthen security and enhance productivity.
Provide best-practice guidance for secure system and software development.
Qualifications:
Required:
Active Secret security clearance (or ability to obtain).
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field
(or 4+ years of equivalent experience).1–3 years of hands-on experience with RMF processes and the ATO lifecycle.
Experience with:
Software/application vulnerability scanning
DISA STIG implementation
Tools such as eMASS, ACAS, SCC Tool
Familiarity with FedRAMP, DISA APL, or DevSecOps concepts.
Strong technical writing skills for security documentation.
Ability to work independently and collaboratively.
Professional Certifications (DOD 8570 IAT Level II)
Required at hire: Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP
Required within 6 months: SecurityX (IASAE transition preparation)
Highly desired: CASP+, CISSP
Desired:
Experience with Fortify or other SAST tools.
Familiarity with CMMC or NIST 800-171 frameworks.
Knowledge of SSDLC and Security Engineering principles.
Understanding of DevSecOps, Agile methodologies, and Zero Trust Architecture.
Previous experience supporting federal government or DoD customers.
Ability to apply innovative methods and contribute to new security solutions.
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range:
There are a host of factors that can infl
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s