Quick overview
Job description
Job Title: Cybersecurity Vulnerability Engineer
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US
- *
- The Opportunity:
Responsibilities
Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments. Perform authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage. Validate vulnerabilities through technical analysis, PoC testing, and manual verification to reduce false positives. Assess exploitability by evaluating reachability, control effectiveness, and attack-path feasibility. Conduct root-cause analysis for recurring or systemic vulnerabilities and propose engineering-level fixes.
Develop remediation playbooks, secure configuration baselines, and hardening standards. Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems. Integrate vulnerability detection into CI/CD, IaC pipelines, and pre-production environments. Support remediation validation through re-scanning, configuration checks, and targeted testing. Enhance attack surface discovery for internet-facing, ephemeral, and cloud-native assets. Identify coverage gaps in scanning, asset visibility, or control validation and propose improvements.
Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation. Support incident response during vulnerability surge events through rapid scanning and technical remediation assistance. Maintain accurate asset-to-vulnerability mappings to support analytics and automation. Evaluate emerging technologies and support adoption of new scanning and exposure-management capabilities. Assess vulnerabilities in AI/ML/LLM platforms and emerging technologies.
Ensure alignment with NIST and industry frameworks such as NIST SP 800-40, NIST SP 800-53, and CIS Controls.
Qualifications
Required:
A DOD Active TS/SCI Clearance
Bachelor's Degree with a Minimum 7 years' experience in Cybersecurity or equivalent. Strong understanding of operating systems, networking, cloud platforms, and application architectures. Hands-on experience with vulnerability scanners, configuration assessment tools, and security automation. Proficiency in scripting languages such as Python, PowerShell, or Bash. Ability to read and understand exploit code, advisories, and configuration weaknesses. Strong troubleshooting and systems analysis skills.
Experience integrating security tools with CI/CD, cloud APIs, or infrastructure-as-code workflows. Experience with container security, Kubernetes, or cloud-native scanning. Familiarity with attack-path analysis or exposure-management platforms. Experience building custom detection logic or PoC exploit validation. Knowledge of AI/ML/LLM platform security or emerging technology risks. Certifications
DoD 8570 / 8140 compliant certification preferred such as: o CISSP o SecurityX o CySA+ o GIAC
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.
Pay Range
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities.
Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. The proposed salary range for this position is:
$85,800 - $180,200
CACI is an
Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
Similar jobs
- WS

Environmental Planning/Siting (GIS) SpecialistRecently posted Auto Apply
WSP · Lexington · Hybrid · Posted 11 Nov 2026 🇺🇸
LinearTechnologySalary not listed - WS

Data Center CFD Analyst, Lead ConsultantRecently posted Auto Apply
WSP · Troy · Hybrid · Posted 11 Nov 2026 🇺🇸
OnboardingAirflowCFD+7Technology$131k - $182k/yr - WS

Data Center Electrical Engineer, Lead ConsultantRecently posted Auto Apply
WSP · Troy · Hybrid · Posted 11 Nov 2026 🇺🇸
LEEDRevitProject ManagementTechnology$131k - $182k/yr - WS

Data Center Electrical Engineer, ConsultantRecently posted Auto Apply
WSP · Troy · Hybrid · Posted 11 Nov 2026 🇺🇸
AutoCADElectrical DesignRevitTechnology$97k - $135k/yr - WS

Data Center Electrical Engineer, Assistant Vice PresidentRecently posted Auto Apply
WSP · Troy · Hybrid · Posted 11 Nov 2026 🇺🇸
LEEDRevitScheduling+1Technology$153k - $213k/yr - WS

Data Center ICT/Telecom Engineer, Senior ConsultantRecently posted Auto Apply
WSP · Troy · Hybrid · Posted 11 Nov 2026 🇺🇸
AutoCADBIMCAD+1Technology$112k - $147k/yr - Y-

Full Stack Engineer - Go, Java,Node.js, PythonRecently posted
Yoh - A Day & Zimmerman Company · Durham, NC · Hybrid · Posted 12 Nov 2026 🇺🇸
DockerGitAWS+9Technology$49 - $70/hr - ET

Servicenow QARecently posted
Everest Technologies · United States · Hybrid · Posted 12 Nov 2026 🇺🇸
ComplianceProcurementReconciliation+1TechnologySalary not listed - EE
Lead Test Engineer with Federal Client (Remote)Recently posted
Elegant Enterprise Wide Solutions · United States · Remote · Posted 12 Nov 2026 🇺🇸
AgileTechnologySalary not listed - MA

Front-End Developer/ 508 Compliance Specialist with Security ClearanceRecently posted
Markon · Annapolis Junction, MD · Remote · Posted 11 Nov 2026 🇺🇸
OracleMicrosoft ExcelHTML+9Technology$160k - $185k/yr - MA

Full Stack Software Engineer (Java/Spring Boot/Angular/PostgreSQ with Security ClearanceRecently posted
Markon · Annapolis Junction, MD · Remote · Posted 11 Nov 2026 🇺🇸
DockerMicroservicesSpring+14TechnologySalary not listed - WY
Linux Systems Engineer (Systems Engineer Level 1 – SE1) with Security ClearanceRecently posted
Wyetech · Annapolis Junction, MD · Hybrid · Posted 11 Nov 2026 🇺🇸
DockerBashConfluence+7Technology$82 - $111/hr
