Mid Security Information Assurance Engineer

CACI International Inc; Denver (CO); On-site; USD 63,300 - 129,700; Full time

Job summary

CACl International Inc. is seeking a Mid Security Information Assurance Engineer to join an Agile program delivering GEOINT capabilities to NGA. This on-site role requires TS/SCI clearance and up to 10% travel in the Continental US.

You will engineer security into cloud-native systems and support ATO/continuous monitoring activities. Responsibilities include RMF-based security controls, DevSecOps integration, and collaboration with Government ISSMs.

Qualifications

• TS/SCI clearance with ability to obtain polygraph.
• Bachelor’s degree in Cybersecurity, Computer Science, or related discipline (equivalent experience accepted).
• 4+ years of security engineering or information assurance experience.
• Experience implementing NIST RMF controls on DoD/IC systems.
• Hands-on with STIG hardening, ACAS/Nessus, and remediation.
• DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent).
• Ability to work on-site at a Government facility.

Responsibilities

• Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
• Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
• Perform system hardening, vulnerability assessment, and remediation across development and production environments.
• Support security assessment and authorization activities in coordination with Government ISSMs and assessors.
• Analyze findings, develop mitigation strategies, and maintain POA&M through closure.
• Advise development teams on secure design, secure coding, and security architecture decisions.
• Document security engineering artifacts supporting ATO and continuous monitoring.

Skills

Security engineering

NIST RMF

Vulnerability assessment

IAT Level II (Security+ CE)

Cloud security

Kubernetes/containers security

Education

Bachelor’s degree in Cybersecurity/CS

Tools

ACAS/Nessus

STIG hardening

CI/CD security tooling

Job description

Mid Security Information Assurance Engineer

Full‑time, regular employee, Agile program delivering GEOINT capabilities to NGA. Minimum TS/SCI clearance required. Up to 10% travel within Continental US.

Opportunity

• Serve as a security engineer embedded within an Agile program delivering GEOINT capabilities to the National Geospatial‑Intelligence Agency (NGA).
• Work on‑site at a Government facility, side by side with mission stakeholders and system owners.
• Engineer security into modern, cloud‑native systems rather than bolting it on after the fact.
• Play a direct role in achieving and maintaining system authorizations for mission‑critical capabilities.

Responsibilities

• Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
• Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
• Perform system hardening, vulnerability assessment, and remediation across development and production environments.
• Support security assessment and authorization activities in coordination with Government ISSMs and assessors.
• Analyze findings, develop mitigation strategies, and maintain POA&M through closure.
• Advise development teams on secure design, secure coding, and security architecture decisions.
• Document security engineering artifacts supporting ATO and continuous monitoring.

Qualifications

Required:

• TS/SCI Security Clearance with ability to obtain Polygraph.
• Bachelor’s degree in Cybersecurity, Computer Science, or a related technical discipline (equivalent experience accepted).
• 4+ years of security engineering or information assurance experience.
• Experience implementing NIST RMF controls on DoD or IC systems.
• Hands‑on experience with STIG hardening, ACAS/Nessus, and security remediation.
• DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent).
• Ability to work on‑site at a Government facility.

Desired:

• Experience securing Kubernetes, containers, or cloud environments (AWS/C2S).
• Experience integrating security scanning into CI/CD pipelines.
• Prior experience supporting NGA or the Intelligence Community.

Pay Range

$63,300 – $129,700 (national average). Salary influenced by location, experience, and other factors.

EEO Statement

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.