Cybersecurity Vulnerability Engineer at CACI

Job description

Job Title: Cybersecurity Vulnerability Engineer Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Continental US * * * The Opportunity: CACI has an excellent opportunity for an experienced Cybersecurity Vulnerability Engineer in support of a Department of Defense customer. The successful candidate must be a self-starter with an advanced level. This position will support the customer on site at Fort Bragg, NC. Responsibilities: Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments. • Perform authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage. • Validate vulnerabilities through technical analysis, PoC testing, and manual verification to reduce false positives. • Assess exploitability by evaluating reachability, control effectiveness, and attack‑path feasibility. • Conduct root‑cause analysis for recurring or systemic vulnerabilities and propose engineering‑level fixes. • Develop remediation playbooks, secure configuration baselines, and hardening standards. • Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems. • Integrate vulnerability detection into CI/CD, IaC pipelines, and pre‑production environments. • Support remediation validation through re‑scanning, configuration checks, and targeted testing. • Enhance attack surface discovery for internet‑facing, ephemeral, and cloud‑native assets. • Identify coverage gaps in scanning, asset visibility, or control validation and propose improvements. • Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation. • Support incident response during vulnerability surge events through rapid scanning and technical remediation assistance. • Maintain accurate asset‑to‑vulnerability mappings to support analytics and automation. • Evaluate emerging technologies and support adoption of new scanning and exposure‑management capabilities. • Assess vulnerabilities in AI/ML/LLM platforms and emerging technologies. • Ensure alignment with NIST and industry frameworks such as NIST SP 800‑40, NIST SP 800‑53, and CIS Controls. Qualifications: Required: • A DOD Active TS/SCI Clearance • Bachelor's Degree with a Minimum 7 years’ experience in Cybersecurity or equivalent. Strong understanding of operating systems, networking, cloud platforms, and application architectures. • Hands‑on experience with vulnerability scanners, configuration assessment tools, and security automation. • Proficiency in scripting languages such as Python, PowerShell, or Bash. • Ability to read and understand exploit code, advisories, and configuration weaknesses. • Strong troubleshooting and systems analysis skills. • Experience integrating security tools with CI/CD, cloud APIs, or infrastructure‑as‑code workflows. • Experience with container security, Kubernetes, or cloud‑native scanning. • Familiarity with attack‑path analysis or exposure‑management platforms. • Experience building custom detection logic or PoC exploit validation. • Knowledge of AI/ML/LLM platform security or emerging technology risks. Certifications • DoD 8570 / 8140 compliant certification preferred such as: o CISSP o SecurityX o CySA+ o GIAC • - What You Can Expect: A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust