Cybersecurity Vulnerability Engineer

CACI; Fort Bragg (NC); On-site; USD 86,000 - 180,000; Full time

Benefits offered by this job

Healthcare

Wellness

Financial

Retirement

Family support

Continuing education

Time off benefits

Job summary

CA CI is seeking an experienced Cybersecurity Vulnerability Engineer to support a DoD customer on site at Fort Bragg, NC. You will deploy and maintain vulnerability scanning across hybrid environments, validate findings, and build remediation workflows aligned to security frameworks.

The role requires a DoD TS/SCI clearance, a bachelor's degree with 7+ years in cybersecurity, and hands-on experience with scanners, automation, and CI/CD integrations.

Qualifications

• DoD Active TS/SCI Clearance.
• Bachelor's Degree with 7+ years in Cybersecurity.
• Hands-on with vulnerability scanners, configuration tools, and security automation.
• Proficiency in Python, PowerShell, and Bash.

Responsibilities

• Deploy and maintain vulnerability scanning across network, application, cloud, container, and endpoint environments.
• Run authenticated and unauthenticated scans across hybrid infrastructure and tune configurations.
• Validate vulnerabilities using PoC testing and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack-path feasibility.
• Perform root-cause analysis for recurring vulnerabilities and propose engineering-level fixes.
• Develop remediation playbooks, secure baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and CI/CD integrations.
• Integrate vulnerability detection into CI/CD, IaC pipelines, and pre-production environments.
• Support remediation validation through re-scanning and configuration checks.

Skills

Python

PowerShell

Bash

CI/CD

Cloud platforms

Kubernetes

Education

Bachelor's Degree

Tools

Vulnerability scanners

Configuration assessment tools

Security automation

CI/CD

Cloud APIs

Infrastructure as Code

Kubernetes

AI/ML/LLM platform security

Job description

CA CI is seeking an experienced Cybersecurity Vulnerability Engineer to support a Department of Defense customer on site at Fort Bragg, NC. The role focuses on deploying and maintaining vulnerability scanning across hybrid environments, validating findings, and building remediation and automation workflows aligned to established security frameworks.

Location

Fort Bragg, NC (onsite)

Compensation

USD 85,800 - 180,200 per yearly

Role Responsibilities

• Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments.
• Run authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
• Validate vulnerabilities using technical analysis, PoC testing, and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack-path feasibility.
• Perform root-cause analysis for recurring or systemic vulnerabilities and propose engineering-level fixes.
• Develop remediation playbooks, secure configuration baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
• Integrate vulnerability detection into CI/CD, IaC pipelines, and pre-production environments.
• Support remediation validation through re-scanning, configuration checks, and targeted testing.
• Enhance attack surface discovery for internet-facing, ephemer, and cloud-native assets.
• Identify gaps in scanning coverage, asset visibility, and control validation, and propose improvements.
• Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
• Support incident response during vulnerability surge events with rapid scanning and technical remediation assistance.
• Maintain accurate asset-to-vulnerability mappings to support analytics and automation.
• Evaluate emerging technologies and support adoption of new scanning and exposure-management capabilities.
• Assess vulnerabilities in AI/ML/LLM platforms and other emerging technologies.
• Ensure work aligns with NIST and industry frameworks including NIST SP 800-40, NIST SP 800-53, and CIS Controls.

Minimum Qualifications

• DoD Active TS/SCI Clearance.
• Bachelor's Degree with a minimum 7 years experience in Cybersecurity or equivalent.
• Strong understanding of operating systems, networking, cloud platforms, and application architectures.
• Hands-on experience with vulnerability scanners, configuration assessment tools, and security automation.

Additional Requirements

• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Ability to read and understand exploit code, advisories, and configuration weaknesses.
• Strong troubleshooting and systems analysis skills.
• Experience integrating security tools with CI/CD, cloud APIs, or infrastructure-as-code workflows.
• Experience with container security, Kubernetes, or cloud-native scanning.
• Familiarity with attack-path analysis or exposure-management platforms.
• Experience building custom detection logic or performing PoC exploit validation.
• Knowledge of AI/ML/LLM platform security or emerging technology risks.

Preferred Certifications

• DoD 8570 / 8140 compliant certification preferred such as: CISSP, SecurityX, CySA+, GIAC.

Tools and Technologies

Python, PowerShell, Bash, APIs, CI/CD, IaC, cloud platforms, ticketing systems, Kubernetes, AI/ML/LLM, NIST SP 800-40, NIST SP 800-53, CIS Controls

Benefits

• Healthcare
• Wellness
• Financial
• Retirement
• Family support
• Continuing education
• Time off benefits

Travel Requirements

• Percentage of Travel Required: Up to 10%
• Type of Travel: Continental US

Opportunity

• Support the customer on site at Fort Bragg, NC.
• The successful candidate must be a self-starter with an advanced level.