Security Engineer

CACI International Inc; Washington (District of Columbia); On-site; USD 90,000 - 190,000; Full time

Job summary

CACI International Inc. is seeking a Security Engineer to safeguard DHS OIG missions. You will design and maintain security controls for AI data, ensure federal compliance, and enable secure analytics across Azure Government environments.

You will implement RBAC, encryption, logging, and data protection across enterprise data platforms, cloud infra, and mission apps while coordinating with privacy and DevSecOps teams to sustain a strong security posture.

Qualifications

• Bachelor's degree and 7+ years in cybersecurity or related field; equivalents allowed.
• Experience implementing security controls, access management, encryption, and logging.
• Familiarity with NIST 800-53, FedRAMP, FISMA, and ATO processes.
• Cloud security experience in Azure Government or similar GovCloud.
• Experience with SIEM, log analysis, monitoring, and incident response.

Responsibilities

• Design, implement, and maintain security controls across AI platforms and data environments.
• Enforce RBAC, data protection measures for SPII/LES/FOUO data per policy.
• Integrate with SIEM systems and log aggregation for monitoring and response.
• Monitor logs and user behavior to detect unauthorized activity and exfiltration.
• Support ATO processes, testing coordination, and continuous monitoring.
• Perform vulnerability assessments, secure code review, and configuration reviews.
• Provide forensic analysis and incident response support for investigations.
• Coordinate with DHS OIG teams to ensure compliance and secure posture.
• Develop security architecture diagrams and documentation.

Skills

Security engineering

Cloud security

SIEM

Access management

Education

Bachelor's degree in a related field

Master's +4 years

13 years with no degree

AA + 9 years

Tools

Azure Government

Entra ID/Azure AD

SIEM tools

Job description

Job Title: Security Engineer
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: None
Employee Type: Regular
Percentage of Travel Required: None
Type of Travel: None
* * *

The Opportunity

CACI is seeking a dedicated Security Engineer to support the Department of Homeland Security (DHS) Office of the Inspector General (OIG). This role offers a unique opportunity to safeguard cutting-edge AI and data analytics capabilities that strengthen national security oversight through investigative, audit, and inspection operations.
As a Security Engineer, you will design, implement, and maintain comprehensive security controls that protect sensitive investigative data, ensure compliance with federal security requirements, and enable secure AI and analytics capabilities. You will implement role-based access controls, encryption, logging and monitoring infrastructure, and data protection measures across AI applications, enterprise data platforms, and cloud infrastructure. From integrating with SIEM tools and enforcing controls for Law Enforcement Sensitive (LES) data to supporting Authority to Operate (ATO) processes and conducting security testing, you will be the guardian of data security and compliance. Working within Azure Government environments, you will ensure that transformational AI and data capabilities meet the highest standards of federal cybersecurity. Join us to make a meaningful impact by securing mission-critical systems on a program of national importance.

Responsibilities

• Design, implement, and maintain comprehensive security controls including application and infrastructure logging, access controls, audit trails, encryption, and least-privilege access policies across AI platforms, data environments, and mission applications
• Implement and enforce role-based access controls (RBAC), data security policies, and protective measures for sensitive data including Sensitive Personally Identifiable Information (SPII), Law Enforcement Sensitive (LES), and For Official Use Only (FOUO) data consistent with DHS OIG policies
• Integrate applications, data platforms, and cloud infrastructure with OIG-approved Security Information and Event Management (SIEM) systems and log aggregation tools to enable security monitoring, alerting, and incident response
• Monitor and analyze security logs, access patterns, and user behavior to detect unauthorized access attempts, anomalous activity, data exfiltration risks, and potential security incidents across all platform layers
• Support Authority to Operate (ATO) processes including security control implementation documentation, security testing coordination, vulnerability assessment, remediation evidence preparation, and ongoing compliance monitoring aligned with NIST 800-53 and FedRAMP requirements
• Perform comprehensive security testing including vulnerability assessments, penetration testing coordination, secure code review, configuration assessments, and validation that pilot applications and production systems meet security requirements
• Implement application-level security controls including input validation, output encoding, authentication/authorization mechanisms, session management, secure API design, and protection against OWASP Top 10 vulnerabilities
• Provide specialized forensic analysis and incident response support including server/virtual machine reconstruction, security-focused data analysis, digital evidence preservation, and technical declarations for investigative or administrative matters
• Coordinate with DHS OIG cybersecurity teams, privacy officers, DevSecOps teams, and Authorizing Officials to ensure integrated security posture, compliance with enterprise security policies, and alignment with continuous monitoring programs
• Develop and maintain security documentation including security architecture diagrams, control implementation evidence, configuration standards, incident response procedures, and security knowledge transfer materials

Qualifications

Required –

• Bachelor's degree + 7 years of experience in cybersecurity, information security, security engineering, or related field; equivalencies considered (Master's + 4 years; 13 years with no degree; AA + 9 years)
• Must be able to obtain DHS / EOD Clearance.
• Proven experience implementing security controls, access management, encryption, and logging/monitoring solutions for enterprise applications and cloud infrastructure.
• Strong understanding of federal security requirements including NIST 800-53, FedRAMP, FISMA, and experience supporting Authority to Operate (ATO) processes and continuous monitoring programs.
• Hands-on experience with cloud security in Azure (or AWS/GCP) including identity and access management (Entra ID/Azure AD), network security, encryption services, and security monitoring tools.
• Demonstrated experience with SIEM platforms, log analysis, security monitoring, intrusion detection, and incident response practices.

Desired –

• Experience securing AI/ML applications, data analytics platforms, or sensitive data environments in federal government, law enforcement, or national security contexts with understanding of investigative data handling requirements.
• Hands-on experience with Azure Government or other secure government cloud environments (AWS GovCloud) including implementation of security controls for FedRAMP High or DoD Impact Level environments.
• Professional security certifications such as CISSP, CEH, GIAC (GSEC, GCIH, GCIA), Security+, or equivalent demonstrating advanced security knowledge and commitment to the profession.

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CAC I values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The Proposed Salary Range For This Position Is

$90,300-$189,600

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.