Senior Cybersecurity Software Engineer

CACI International Inc; Chantilly (VA); On-site; USD 99,000 - 207,000; Full time

Job summary

CACI International Inc seeks a Senior Cybersecurity Software Engineer to join the Spectral Cyber team supporting Navy software initiatives. You will design, implement, and automate secure software solutions across on-prem and cloud-like environments.

Candidates should have TS/SCI, 7+ years in cyber engineering, Kubernetes security, IaC, Ansible, ArgoCD, and RMF; familiarity with SIEM/SAST/DAST and secure SDLC; ability to collaborate across software, IT, and DevOps to advance security posture.

Qualifications

• Active TS/SCI and ability to obtain a Polygraph within 90 days.
• Bachelor's degree in a related field.
• 7+ years’ experience in cyber engineering, with at least 5 years in modern software technologies.
• Proven Kubernetes platform security and modular architectures, secure SDLC and cloud-native security.
• Deep technical understanding of cyber/security toolsets (SIEM, SAST, DAST, SCA).
• Hands-on experience with Zero Trust tooling and identity-centric security services.
• IaC, PaaS, and mission applications knowledge; automate RMF, control engineering, telemetry pipelines.
• Sec+ and/or CISSP certification, or ability to obtain within 90 days of onboarding.
• Scripting languages (e.g., bash, python, java, PowerShell) and knowledge of Ansible playbooks and ArgoCD integration.
• Networking fundamentals, TCP/IP, firewalls, and packet inspection on Linux/Windows/Kubernetes.

Responsibilities

• Automate cybersecurity architecture using IaC for on-prem and distributed platforms with end-to-end Zero Trust.
• Integrate security controls into IaC, PaaS, and mission apps to automate IAM, encryption, logging, and monitoring.
• Streamline hardening of IaC/PaaS/mission apps to meet benchmarks.
• Support secure deployments for containerized platforms and mission apps.
• Coordinate cybersecurity tools pipeline integration and automate outputs into dashboards.
• Automate RMF control implementation and telemetry for continuous delivery and updates.
• Improve vulnerability remediation and system resiliency across environments.
• Write Ansible playbooks and review code commits from cyber engineers and software developers.
• Ensure end-to-end patch management, SBOM/RBOM, and artifact generation.
• Collaborate across software, IT, DevOps, and hardware teams to improve security across the SDLC.

Skills

Cyber engineering

Kubernetes security

Zero Trust

Secure SDLC

Automation

Python scripting

Education

Bachelor's degree in computer science, software engineering, cyber engineering, systems engineering, information technology, or related field

Tools

Ansible

ArgoCD

Jenkins

Terraform

Job description

Job Title: Senior Cybersecurity Software Engineer

Job Category: Engineering

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity

CACI is looking to hire a Senior Cybersecurity Software Engineer to join our Spectral Cyber team supporting the production of high-quality software applications to support the U.S. Navy mission. The ideal candidate will support the U.S. Navy Spectral Program. Spectral is a seven-year $1.2B program to provide the U.S. Navy's next-generation signals intelligence, electronic warfare, and information operations software technologies. The Spectral system is critical to the ability for our forces to fight and win in the increasingly sophisticated and complex cyber and electronic threats of our adversaries.

We are seeking someone with technical experience who is highly skilled in cyber engineering to be responsible for toolset design, implementation, automation, and optimization of Spectral enterprise-wide security solutions. Desired cyber engineering skillsets will be responsible for continuous development of secure software solutions and hardened mission applications.

The ideal candidate brings hands-on cyber engineering experience with cyber analytics and reverse engineering tactics on Kubernetes infrastructure, who thrives in fast-paced, complex environments, and has a proven track record of technical advancements in cyber engineering, cybersecurity engineering, analysis, and modern software deliverables.

Responsibilities

• Automate cybersecurity architecture within the infrastructure as code (IaC) for on-prem and distributed platforms and mission applications with end-to-end integrated Zero Trust capability to deliver high quality software outcomes.
• Engineer and integrate security controls into the IaC, platform as a service (PaaS), and mission applications to automate and streamline outputs for IAM, encryption, logging, and monitoring compliance validation.
• Streamline hardening of IaC, PaaS, and mission applications leveraging STIG/SRGs, CIS benchmarks, and industry best practices.
• Support secure software deployments, containerized platforms and mission applications.
• Coordinate and engineer cybersecurity tools pipeline integration, enforcement, and automate tool outputs into dynamic decision-making dashboards.
• Engineer and automate RMF security control implementation into the IaC, PaaS, and mission applications to modernize and rapidly produce body of evidence for continuous delivery, monitoring, updates, and improvements.
• Modernize vulnerability remediation outcomes and engineer continuous system resiliency, adaptability, drift correction, and responsiveness to updates.
• Write Ansible playbooks and scripts and perform peer review of cyber engineer as well as software developer code commits.
• Ensure end-to-end system patch management enforcement, SBOM, RBOM, and artifact generation.
• Capable of collaborating cross-functionally with software development, IT, DevOps, hardware/engineering teams, and customer to continuously integrate and improve security posture throughout the SDLC.

Qualifications

Required:

• Active TS/SCI and an ability to obtain the required Polygraph.
• Bachelor's degree in computer science, software engineering, cyber engineering, systems engineering, information technology, or a related field.
• 7+ years’ experience in cyber engineering, with at least 5 years in moder software technologies.
• Proven Kubernetes platform security and modular architectures, technical enterprise architecture, secure SDLC, and cloud-native security.
• Deep technical understanding of cyber and security engineering toolsets and deployment methodologies, and SIEM, SAST, DAST, SCA, and vulnerability exposure technologies.
• Hands-on experience with Zero Trust tools and implementation, micro-segmentation, and identity-centric security services.
• Demonstrated IaC, PaaS, and mission application knowledge, to include ability to automate RMF, control engineering, metrics reporting, and telemetry pipelines.
• Sec+ and/or CISSP certification, or an ability to obtain within 90 days of onboarding.
• Experience in at least one or more scripting languages (e.g., bask, python, java, powershell, etc), and knowledge in Ansible playbooks and ArgoCD integration for automation.
• Working knowledge in network protocols, TCP/IP stack, firewalls, and packet inspection tools on Linux, Windows, and Kubernetes system security.

Desired

• More than one industry certification (CISSP, GSEC, CEH, GCIH, CISSP Associate), or equivalent.
• Familiarity in multiple programming / scripting languages to streamline automation.
• Exposure to DevSecOps pipelines and tools (e.g., Jenkins, Terraform, Ansible, ArgoCD, etc).
• Experience in performing engineering tasks, cross-enclave environments, classified systems, highly regulated environments, and compliance-as-code.
• Knowledge of advanced threat modeling and adversary emulation techniques (e.g., MITRE ATT&CK, etc).

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. Since this position can be worked in more than one location, the range shown is the national average for the position.

The Proposed Salary Range For This Position Is

$98,500-$206,800

• healthcare
• wellness
• financial
• retirement
• family support
• continuing education
• time off benefits

Since this position can be worked in more than one location, the range shown is the national average for the position.

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.