Security Information Assurance Engineer — RMF & Cloud

CACI International Inc.; Denver (CO); On-site; USD 63,300 - 129,700; Full time

Benefits offered by this job

Flexible time off

Learning resources

Job summary

CACI International Inc. seeks a Mid Security Information Assurance Engineer to join an Agile GEOINT program for NGA. This on-site role drives security into cloud-native systems, authorizations, and continuous monitoring, collaborating with mission stakeholders and system owners.

The candidate will implement RMF controls, perform vulnerability management, and support assessments with ISSMs, while guiding secure design and coding across development teams.

Qualifications

• TS/SCI security clearance with ability to obtain polygraph.
• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 4+ years of security engineering or information assurance experience.
• Experience implementing NIST RMF controls on DoD/IC systems.
• Hands-on with STIG hardening, ACAS/Nessus, and security remediation.
• DoD 8570/8140 IAT Level II certification.

Responsibilities

• Design and implement security controls across apps, platforms, and infra per RMF and NGA standards.
• Integrate security tooling into CI/CD pipelines (DevSecOps).
• Perform system hardening, vulnerability assessment, and remediation.
• Support security assessment and authorization with Government ISSMs and assessors.
• Analyze findings, create mitigation plans, and close POA&Ms.
• Advise dev teams on secure design, coding, and security architecture.

Skills

Security Clearance

4+ years experience

RMF implementation

STIG hardening

IAT II certification

Education

Bachelor's degree in Cybersecurity

Tools

ACAS/Nessus

Kubernetes

AWS

CI/CD tooling

Job description

CACI International Inc. seeks a Mid Security Information Assurance Engineer to join an Agile GEOINT program for NGA. This on-site role drives security into cloud-native systems, authorizations, and continuous monitoring, collaborating with mission stakeholders and system owners.

The candidate will implement RMF controls, perform vulnerability management, and support assessments with ISSMs, while guiding secure design and coding across development teams.