Security Automation Engineer - DevSecOps & Compliance

CACI; United States; On-site; USD 63,000 - 130,000; Full time

Job summary

CACI is seeking an Automation Engineer/Tester to support security compliance automation for an IL5 multi-cloud environment. You will work on ISSO/ISSE compliance, testing, and continuous-monitoring automation with a focus on STIG/SCAP processes and security tooling.

The role requires an Interim Secret clearance at minimum and 4+ years in security automation or DevSecOps, with strong experience in CI/CD, SGX scanning tools, and AWS/security integrations.

Qualifications

• Interim Secret clearance minimum to start.
• DoD 8140 foundational/intermediate certifications (e.g., 671 System Testing & Evaluation Specialist) and security certs listed.
• 4+ years in security automation, compliance testing, or DevSecOps.

Responsibilities

• Automate security compliance testing and continuous-monitoring in multi-cloud environments.
• Integrate security scans and results into CI/CD pipelines and AWS Security Hub.
• Develop and maintain incident response and alerting playbooks in Splunk SOAR.

Skills

Python scripting

PowerShell scripting

Bash scripting

SAFe Agile

Tools

ACAS (Tenable SC)

Nessus automation

SCAP Compliance Checker

Trellix Policy Auditor

Tricentis

SonarQube

GitLab CI/CD

Terraform

CloudFormation

AWS Security Hub

Splunk ES

Splunk SOAR

eMASS API

AWS Config conformance pack

AWS Audit Manager

CORA

Job description

CACI is seeking an Automation Engineer/Tester to support security compliance automation for an IL5 multi-cloud environment. You will work on ISSO/ISSE compliance, testing, and continuous-monitoring automation with a focus on STIG/SCAP processes and security tooling.

The role requires an Interim Secret clearance at minimum and 4+ years in security automation or DevSecOps, with strong experience in CI/CD, SGX scanning tools, and AWS/security integrations.