The Opportunity:

As a Senior Cyber Automation Engineer - ISSE, you will perform design, development, and testing activities of new automation tools in support of enterprise security requirements.

Your responsibilities will include system hardening, preparing comprehensive assessment testing procedures, conducting system vulnerability scanning and mitigation, performing system maintenance and configuration, and ensuring thorough documentation. You will support the engineering team by providing direct input on the information system design to obtain and/or maintain a successful Authorization to Operate (ATO).

You will perform in-depth analysis of various security hardening guides (DISA STIGs, CIS Benchmarks, vendor guides, SANS, etc.) to ensure security control coverage is addressed in the scanning methodology.

Responsibilities:

• Research and Development: Conduct research on emerging technologies, vulnerability information, and innovative solutions to enhance enterprise-wide cyber systems and networks.
• System Design and Architecture: Design and develop new cyber systems, applications, and solutions that meet the organization’s security requirements.
• Prototype Development: Create prototypes and proof-of-concept solutions to demonstrate the feasibility and effectiveness of new cyber technologies.
• Testing and Validation: Perform rigorous testing and validation of new cyber systems and applications to ensure they meet performance, security, and compliance requirements.
• Integration and Deployment: Oversee the integration and deployment of new cyber solutions into the enterprise environment, ensuring minimal disruption to operations.
• Security Assessments: Conduct vulnerability assessments and security evaluations of new systems using standardized tools (e.g., Nessus, DISA STIGs) to identify and mitigate potential risks.
• Documentation: Prepare comprehensive documentation, including design specifications, testing reports, and user manuals, to support the implementation and maintenance of new cyber solutions.
• Continuous Improvement: Continuously monitor and evaluate the performance of deployed cyber systems, identifying areas for improvement and implementing enhancements as needed.
• Collaboration: Work closely with cross-functional teams, including developers, system administrators, and security analysts, to ensure the successful delivery of new cyber solutions.
• Customer Interaction: Engage with customers and stakeholders to gather requirements, provide updates on project progress, and ensure that new solutions align with business objectives.
• Compliance: Ensure that all new cyber systems and solutions comply with relevant regulations, standards, and policies (e.g., NIST, ICD 503).

Qualifications:

Required: 

• Clearance: An active TS/SCI clearance with polygraph is required.
• Certification: Must be able to attain a current certification compliant with DoD 8570 IAM or IAT level 2 within 6 months of hire.
• Education and Experience:
  • Bachelor’s degree in Computer Science, Cyber Engineering, Information Assurance, Information Security System Engineering, or equivalent.
  • Seven (7) years of directly related experience in cyber engineering or a related field.
• Experience with Tenable products regarding vulnerability and compliance scanning
• Experience with one scripting language (XML, Perl, Ruby, Python, Bash, JavaScript)
• Experience with reviewing and integrating CIS and DISA security guidance
• Knowledge of Windows and Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts is required

• Designing and developing new cyber systems, applications, and solutions.

• Conducting vulnerability assessments and security evaluations of new technologies.
• Implementing and testing prototypes and proof-of-concept solutions.
• Integrating and deploying new cyber solutions into enterprise environments.
• Collaborating with cross-functional teams to deliver complex projects.
• Preparing comprehensive documentation for new cyber systems and solutions.

Desired:

• Proficient in Microsoft Application tools (i.e., Excel and PowerPoint).
• Experience with Sharepoint, Confluence, JIRA.
• Experience with developing test plans for information systems.
• Demonstrated system administration experience with Linux (Red Hat, CentOS) and/or Windows.
• Experience with DevOps.
• Familiarity with code quality and code analyzing security tools.
• Knowledge of and proficiency in the use of virtualization and cloud technologies
• Knowledge of Nessus Attack Scripting Language (NASL)
• Audit log review: Ability to query and perform analysis in Splunk.
• Experience within the Intelligence Community.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is: