TS/SCI Cyber Security Engineer: RMF & Vulnerability Expert

CACI International Inc.; North Charleston (SC); On-site; USD 72,000 - 150,000; Full time

Job summary

CAci International Inc. is seeking a skilled Cyber Security Engineer to design, implement, and maintain secure systems and networks. You will collaborate with development and IT teams to apply security best practices, identify vulnerabilities, and ensure compliance with industry standards.

You’ll contribute to strengthening the security posture of critical infrastructure and systems supporting CACI operations, while translating risks and requirements to both technical and non-technical audiences.

Qualifications

• Bachelor’s degree required or equivalent experience; 5+ years in cybersecurity engineering.
• Active TS/SCI clearance to start and US citizenship.
• Strong RMF experience and secure system design knowledge.
• Experience with STIGs, eMASS/XACTA, and vulnerability remediation.

Responsibilities

• Translate RMF results into testable security requirements across hardware, software, and networks.
• Maintain security artifacts, AV/ATOs, data flow diagrams, and registrations.
• Analyze Nessus/ACAS results and guide remediation with admins.
• Provide A&A support and RMF guidance through the authorization lifecycle.
• Support STIG implementation and audit readiness; communicate risks to stakeholders.

Skills

RMF

NIST SP 800-53 Rev 5

NIST SP 800-37

DISA STIGs & SRGs

Vulnerability management

ACAS/Nessus/STIG/SCAP

SIEM platforms

Security tooling

Documentation

Windows Server hardening

RHEL/Linux hardening

Education

Bachelor’s degree in Cybersecurity

Tools

Nessus

Tenable Security Center

ACAS

eMASS

XACTA

STIGs tooling

Qualys

Job description

CAci International Inc. is seeking a skilled Cyber Security Engineer to design, implement, and maintain secure systems and networks. You will collaborate with development and IT teams to apply security best practices, identify vulnerabilities, and ensure compliance with industry standards.

You’ll contribute to strengthening the security posture of critical infrastructure and systems supporting CACI operations, while translating risks and requirements to both technical and non-technical audiences.