About this role
Cyber Security Engineer -Remote (clearance)
Job Description: ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. Unless specifically stated otherwise, this role is "On-Site"
Cyber Security Engineer
Remote (Any State) Minimum Clearance Required to Start: Secret Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Continental US
The Opportunity: CACI is seeking a Cyber Security Engineer to support our USTRANSCOM customer. This role is ideal for a cybersecurity professional with hands-on experience in the Risk Management Framework (RMF), NIST guidelines, security assessments, and implementation of security controls. You will directly contribute to achieving Authorization to Operate (ATO), reducing organizational risk, and strengthening mission-critical defense capabilities across DoD environments
Responsibilities: • RMF & Compliance Management • Manage the full RMF accreditation lifecycle and maintain continuous compliance for DoD computing environments. • Create, manage, and maintain RMF artifacts throughout the ATO lifecycle. • Generate and review System Security Plans (SSPs), network diagrams, security architecture documentation, and compliance reports. • Develop and track POA&Ms to support remediation efforts. • Assist the ISSM with continuous monitoring activities. • Technical Security Implementation • Perform hands-on security assessments of enclave and network infrastructure devices, primarily within Windows environments. • Design, implement, and validate security controls in accordance with NIST 800-53, DISA STIGs, DFARS, and CMMC frameworks. • Conduct software vulnerability scanning and triage findings across application portfolios. • Interpret and apply DISA STIG requirements using SCC Tool, eMASS, and ACAS. • Collaboration & Process Improvement • Work with development, operations, and cybersecurity teams to embed security throughout the SDLC. • Identify and recommend process improvements to strengthen security and enhance productivity. • Provide best-practice guidance for secure system and software development.
The proposed salary range for this position is:
$53,100-$106,300
Required Experience: Required: • Active Secret security clearance (or ability to obtain). • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (or 4+ years of equivalent experience). • 1–3 years of hands-on experience with RMF processes and the ATO lifecycle. • Experience with: • Software/application vulnerability scanning • DISA STIG implementation • Tools such as eMASS, ACAS, SCC Tool • Familiarity with FedRAMP, DISA APL, or DevSecOps concepts. • Strong technical writing skills for security documentation. • Ability to work independently and collaboratively.
• Professional Certifications (DOD 8570 IAT Level II) • Required at hire: Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP • Required within 6 months: SecurityX (IASAE transition preparation) • Highly desired: CASP+, CISSP
Preferred Experience: Desired: • Experience with Fortify or other SAST tools. • Familiarity with CMMC or NIST 800-171 frameworks. • Knowledge of SSDLC and Security Engineering principles. • Understanding of DevSecOps, Agile methodologies, and Zero Trust Architecture. • Previous experience supporting federal government or DoD customers. • Ability to apply innovative methods and contribute to new security solutions.