Mid Security Information Assurance Engineer
CACI International Inc · Denver, CO · 1 mo ago
OTHR$63k–$130k/yrFull-time
The Opportunity
Serve as a security engineer embedded with an Agile program delivering GEOINT capabilities to the National Geospatial-Intelligence Agency (NGA). Work on-site at a Government facility, side by side with mission stakeholders and system owners. Engineer security into modern, cloud-native systems rather than bolting it on after the fact. Play a direct role in achieving and maintaining system authorizations for mission-critical capabilities. This position is contingent upon contract award.
Responsibilities
- Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
- Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
- Perform system hardening, vulnerability assessment, and remediation across development and production environments.
- Support security assessment and authorization activities in coordination with Government ISSMs and assessors.
- Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure.
- Advise development teams on secure design, secure coding, and security architecture decisions.
- Document security engineering artifacts supporting ATO and continuous monitoring.
Required Qualifications
- TS/SCI Security Clearance with ability to obtain Polygraph.
- Bachelor's degree in Cybersecurity, Computer Science, or a related technical discipline (equivalent experience accepted).
- 4+ years of security engineering or information assurance experience.
- Experience implementing NIST RMF controls on DoD or IC systems.
- Hands-on experience with STIG hardening, ACAS/Nessus, and security remediation.
- DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent).
- Ability to work on-site at a Government facility.
Desired Skills
- Experience securing Kubernetes, containers, or cloud environments (AWS/C2S).
- Experience integrating security scanning into CI/CD pipelines.
- Prior experience supporting NGA or the Intelligence Community.