DoD Information Security Engineer (ISSE)

CACI International Inc.; Northern (KY); Hybrid; USD 75,000 - 158,000; Full time

Job summary

CACI International Inc. is seeking an Information Systems Security Engineering (ISSE) to work across DoD environments, focusing on STIG, vulnerability management, and PAM, using STIGviewer, SCAP, Tenable, and CyberArk.

You will collaborate with GRC, operations, and architecture teams; mentorship; and a clear path to senior security engineering. Travel up to 10% locally, with the role based in Kentucky.

Qualifications

• Active Secret or TS clearance required.
• 3–5 years of security engineering or system-hardening experience.
• Hands-on experience with STIGviewer and SCAP Compliance Checker.
• Working experience with Tenable SC or similar vulnerability management platforms.
• Strong knowledge of secure configuration management principles.
• DoD 8140.03M DCWF Basic Tier: CEH
• DoD 8140 Interim Education Options

Responsibilities

• Implement and document STIG configurations across assigned systems and platforms.
• Conduct Security Impact Analyses (SIAs) for proposed changes.
• Run automated configuration validation using SCAP Compliance Checker.
• Manage vulnerability tracking and remediation workflows within Tenable SC.
• Evaluate cloud infrastructure security posture using Tenable Cloud Security.
• Support CyberArk PAM setup and privileged access management.
• Create and maintain secure configuration baselines.
• Write detailed technical security control implementation guides.
• Partner with the Cybersecurity Architect on technical security implementations

Skills

Security engineering

System hardening

Secure configuration management

DoD 8140 basics

Education

Bachelor’s degree in Cybersecurity, Computer Science, Data Science, Information Systems, Information Technology, or Software Engineering

Tools

STIGviewer

SCAP Compliance Checker

Tenable SC

CyberArk PAM

Job description

CACI International Inc. is seeking an Information Systems Security Engineering (ISSE) to work across DoD environments, focusing on STIG, vulnerability management, and PAM, using STIGviewer, SCAP, Tenable, and CyberArk.

You will collaborate with GRC, operations, and architecture teams; mentorship; and a clear path to senior security engineering. Travel up to 10% locally, with the role based in Kentucky.