Senior Attack Surface Testing Lead - Automation & Security

Visa Hunt; United States; On-site; USD 90,000 - 190,000; Full time

Job summary

CACI is seeking a Senior Attack Surface Testing SME to lead continuous-assessment operations for federal cyber assets. You will design large-scale enumeration, oversee junior engineers, and deliver rapid remediation guidance with a focus on high-risk findings.

This role involves coordinating with VM-ASE leads, cloud/DevOps teams, and AI-assisted analysis staff to provide repeatable, high-confidence assessments across .gov domains and internet-facing assets under CDM program objectives.

Qualifications

• U.S. citizenship is required.
• Public Trust fitness determination (High Risk) eligibility.
• 5+ years in attack-surface management, vulnerability assessment, external reconnaissance, or leadership of continuous/large-scale assessment.
• Deep knowledge of DNS, TLS/PKI, HTTP/S, TCP/IP, routing, cloud-hosting patterns, asset attribution, scanner behavior, and manual validation.
• Strong automation and integration skills using Python, Go, Bash, APIs, and CI/CD pipelines.
• One or more relevant certifications such as OSCP, OSEP/OSCE, GPEN, GXPN, CISSP, GCIH, cloud-security certs, or equivalent

Responsibilities

• Lead continuous attack-surface enumeration, vulnerability discovery, validation, triage, reporting, and remediation-support activities.
• Design scan architecture, asset attribution logic, rate limits, credential handling, validation procedures, and deconfliction safeguards for large-scale production assessment.
• Direct and mentor junior engineers; review findings, evidence, false positives, attack paths, severity, and remediation recommendations.
• Prioritize risk using exposure, exploitability, CVEs, asset criticality, compensating controls, and mission impact.
• Lead rapid analysis of newly exposed or high-risk assets and coordinate urgent notifications, clarifications, and closure validation.
• Define automation requirements, data normalization, dashboards, AI-assisted triage, and integrations with customer tools and repositories.
• Produce and technically approve recurring reports, trend analyses, high-risk findings, playbooks, SOPs, and customer briefings.

Skills

Python

Go

Bash

APIs

Automation

Education

Security certifications

Tools

SIEM

Data lake

Terraform

Ansible

Job description

CACI is seeking a Senior Attack Surface Testing SME to lead continuous-assessment operations for federal cyber assets. You will design large-scale enumeration, oversee junior engineers, and deliver rapid remediation guidance with a focus on high-risk findings.

This role involves coordinating with VM-ASE leads, cloud/DevOps teams, and AI-assisted analysis staff to provide repeatable, high-confidence assessments across .gov domains and internet-facing assets under CDM program objectives.