Job Title: Cybersecurity Vulnerability Engineer
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US
* * *
The Opportunity:
CACI has an excellent opportunity for an experienced Cybersecurity Vulnerability Engineer in support of a Department of Defense customer. The successful candidate must be a self-starter with an advanced level. This position will support the customer on site at Fort Bragg, NC.
Responsibilities:
Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments.
• Perform authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
• Validate vulnerabilities through technical analysis, PoC testing, and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack‑path feasibility.
• Conduct root‑cause analysis for recurring or systemic vulnerabilities and propose engineering‑level fixes.
• Develop remediation playbooks, secure configuration baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
• Integrate vulnerability detection into CI/CD, IaC pipelines, and pre‑production environments.
• Support remediation validation through re‑scanning, configuration checks, and targeted testing.
• Enhance attack surface discovery for internet‑facing, ephemeral, and cloud‑native assets.
• Identify coverage gaps in scanning, asset visibility, or control validation and propose improvements.
• Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
• Support incident response during vulnerability surge events through rapid scanning and technical remediation assistance.
• Maintain accurate asset‑to‑vulnerability mappings to support analytics and automation.
• Evaluate emerging technologies and support adoption of new scanning and exposure‑management capabilities.
• Assess vulnerabilities in AI/ML/LLM platforms and emerging technologies.
• Ensure alignment with NIST and industry frameworks such as NIST SP 800‑40, NIST SP 800‑53, and CIS Controls.
Qualifications:
Required:
• A DOD Active TS/SCI Clearance
• Bachelor's Degree with a Minimum 7 years’ experience in Cybersecurity or equivalent.
Strong understanding of operating systems, networking, cloud platforms, and application architectures.
• Hands‑on experience with vulnerability scanners, configuration assessment tools, and security automation.
• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Ability to read and understand exploit code, advisories, and configuration weaknesses.
• Strong troubleshooting and systems analysis skills.
• Experience integrating security tools with CI/CD, cloud APIs, or infrastructure‑as‑code workflows.
• Experience with container security, Kubernetes, or cloud‑native scanning.
• Familiarity with attack‑path analysis or exposure‑management platforms.
• Experience building custom detection logic or PoC exploit validation.
• Knowledge of AI/ML/LLM platform security or emerging technology risks.
Certifications
• DoD 8570 / 8140 compliant certification preferred such as:
o CISSP
o SecurityX
o CySA+
o GIAC
•
-
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing…