Job Title: Cybersecurity Vulnerability Engineer
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US
* * *
The Opportunity:
CACI has an excellent opportunity for an experienced Cybersecurity Vulnerability Engineer in support of a Department of Defense customer. The successful candidate must be a self-starter with an advanced level. This position will support the customer on site at Fort Bragg, NC.
Responsibilities:
Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments.
• Perform authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
• Validate vulnerabilities through technical analysis, PoC testing, and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack‑path feasibility.
• Conduct root‑cause analysis for recurring or systemic vulnerabilities and propose engineering‑level fixes.
• Develop remediation playbooks, secure configuration baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
• Integrate vulnerability detection into CI/CD, IaC pipelines, and pre‑production environments.
• Support remediation validation through re‑scanning, configuration checks, and targeted testing.
• Enhance attack surface discovery for internet‑facing, ephemeral, and cloud‑native assets.
• Identify coverage gaps in scanning, asset visibility, or control validation and propose improvements.
• Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
• Support incident response during vulnerability surge events through rapid scanning and technical remediation assistance.
• Maintain accurate asset‑to‑vulnerability mappings to support analytics and automation.
• Evaluate emerging technologies and support adoption of new scanning and exposure‑management capabilities.
• Assess vulnerabilities in AI/ML/LLM platforms and emerging technologies.
• Ensure alignment with NIST and industry frameworks such as NIST SP 800‑40, NIST SP 800‑53, and CIS Controls.
Qualifications:
Required:
• A DOD Active TS/SCI Clearance
• Bachelor's Degree with a Minimum 7 years’ experience in Cybersecurity or equivalent.
Strong understanding of operating systems, networking, cloud platforms, and application architectures.
• Hands‑on experience with vulnerability scanners, configuration assessment tools, and security automation.
• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Ability to read and understand exploit code, advisories, and configuration weaknesses.
• Strong troubleshooting and systems analysis skills.
• Experience integrating security tools with CI/CD, cloud APIs, or infrastructure‑as‑code workflows.
• Experience with container security, Kubernetes, or cloud‑native scanning.
• Familiarity with attack‑path analysis or exposure‑management platforms.
• Experience building custom detection logic or PoC exploit validation.
• Knowledge of AI/ML/LLM platform security or emerging technology risks.
Certifications
• DoD 8570 / 8140 compliant certification preferred such as:
o CISSP
o SecurityX
o CySA+
o GIAC
•
-
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
The proposed salary range for this position is:
$85,800 - $180,200
CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
CACI International Inc. is a multinational professional services and information technology company based in Northern Virginia. Founded in 1962, CACI specializes in providing mission-critical technology and services to the U.S. federal government. The company has grown significantly over the years and is now a Fortune 1000 entity with around 24,000 employees and reported revenues of $7.0 billion in FY2024. CACI offers a range of services across various domains, including defense, homeland security, intelligence, and healthcare. Their core capabilities encompass signals intelligence, cybersecurity solutions, enterprise IT services, intelligence analytics, and space-based sensing. The company has a strong history of innovation, with early products like SIMSCRIPT II.5 and ongoing development of IT systems for government agencies. CACI's growth strategy includes acquiring other IT firms to enhance its service offerings, with recent acquisitions aimed at expanding its capabilities in space-based sensing.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
3 Intel Signals
Security Philosophy
Stated AppSec Mission: - "Security is at the core of everything we do."– CACI Secure App Development (https://www.caci.co.uk/solutions/redefine-technology/security-devops/secure-app-development/), Website .
Developer Enablement vs. Gatekeeping: - "Transform software development by embedding security at every stage"– CACI DevSecOps (https://www.caci.co.uk/solutions/redefine-technology/security-devops/devsecops/), Website.
Security Team
g., reports to CISO or CTO) or centralized vs. embedded model
Key Initiatives
"Shift Left"in Practice: - "embedding security at every stage"– CACI DevSecOps (https://www.caci.co.uk/solutions/redefine-technology/security-devops/devsecops/), Website
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.