Senior Cyber Security & IA Engineer (TS/SCI Poly)

CACI International Inc; Chantilly (VA); On-site; USD 104,000 - 218,000; Full time

Job summary

The Cyber Security/Information Assurance Engineer/Technician at CACI will perform security control assessments following NIST SP 800-53 and RMF guidance to determine the effectiveness of controls across complex information systems.

Responsibilities include hands-on testing, evaluating government systems, documenting findings, and advising on corrective actions to meet regulatory security requirements for national security systems. Travel up to 10% may be required.

Qualifications

• Bachelor of Science in Cybersecurity, Computer Science, Information Systems, or Computer Systems Engineering.
• 7+ years of hands-on information security, network security, or systems engineering.
• Knowledge of firewalls, VPNs, IDS/IPS, and endpoint protection.
• Proficiency in Linux, Windows, TCP/IP, and network architecture.
• Understanding of risk assessments, security frameworks, vulnerability management, and incident response.

Responsibilities

• Evaluate Government customer systems against NIST SP 800-53/53A, RMF and other security standards; use Xacta-360 for tracking.
• Conduct hands-on security control testing, analyze BoE documentation and test results; document risk and recommend countermeasures.
• Provide assessment of severity of weaknesses and defects and recommend corrective actions.
• Conduct hands-on security testing with commercial tools and custom scripts; develop procedures.

Skills

Firewall knowledge

VPN knowledge

IDS/IPS

Linux proficiency

Windows proficiency

Risk assessment

NIST RMF familiarity

Education

Bachelor of Science in Cybersecurity, Computer Science, Information Systems, or Computer Systems Engineering

Job description

The Cyber Security/Information Assurance Engineer/Technician at CACI will perform security control assessments following NIST SP 800-53 and RMF guidance to determine the effectiveness of controls across complex information systems.

Responsibilities include hands-on testing, evaluating government systems, documenting findings, and advising on corrective actions to meet regulatory security requirements for national security systems. Travel up to 10% may be required.