Job Title: Cybersecurity Vulnerability Engineer
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US
The Opportunity
CACI has an excellent opportunity for an experienced Cybersecurity Vulnerability Engineer in support of a Department of Defense customer. The successful candidate must be a self-starter with an advanced level. This position will support the customer on site at Fort Bragg, NC.
Responsibilities
- Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments.
- Perform authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
- Validate vulnerabilities through technical analysis, PoC testing, and manual verification to reduce false positives.
- Assess exploitability by evaluating reachability, control effectiveness, and attack‑path feasibility.
- Conduct root‑cause analysis for recurring or systemic vulnerabilities and propose engineering‑level fixes.
- Develop remediation playbooks, secure configuration baselines, and hardening standards.
- Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
- Integrate vulnerability detection into CI/CD, IaC pipelines, and pre‑production environments.
- Support remediation validation through re‑scanning, configuration checks, and targeted testing.
- Enhance attack surface discovery for internet‑facing, ephemeral, and cloud‑native assets.
- Identify coverage gaps in scanning, asset visibility, or control validation and propose improvements.
- Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
- Support incident response during vulnerability surge events through rapid scanning and technical remediation assistance.
- Maintain accurate asset‑to‑vulnerability mappings to support analytics and automation.
- Evaluate emerging technologies and support adoption of new scanning and exposure‑management capabilities.
- Assess vulnerabilities in AI/ML/LLM platforms and emerging technologies.
- Ensure alignment with NIST and industry frameworks such as NIST SP 800‑40, NIST SP 800‑53, and CIS Controls.
Show the full description
Qualifications
- Required:
- A DOD Active TS/SCI Clearance
- Bachelor's Degree with a Minimum 7 years’ experience in Cybersecurity or equivalent.
- Strong understanding of operating systems, networking, cloud platforms, and application architectures.
- Hands‑on experience with vulnerability scanners, configuration assessment tools, and security automation.
- Proficiency in scripting languages such as Python, PowerShell, or Bash.
- Ability to read and understand exploit code, advisories, and configuration weaknesses.
- Strong troubleshooting and systems analysis skills.
- Experience integrating security tools with CI/CD, cloud APIs, or infrastructure‑as‑code workflows.
- Experience with container security, Kubernetes, or cloud‑native scanning.
- Familiarity with attack‑path analysis or exposure‑management platforms.
- Experience building custom detection logic or PoC exploit validation.
