> Markdown version of [/jobs/ext/1569430-mid-security-information-assurance-engineer](https://www.wearedevelopers.com/jobs/ext/1569430-mid-security-information-assurance-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Mid Security Information Assurance Engineer

- **Company:** CACI International Inc.
- **Location:** Denver, CO, United States
- **Experience:** Experienced
- **Salary:** $63,300.0 - $129,700.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cyber Security, Geospatial Intelligence, Secure Coding, Cloud Platform System, Kubernetes, Information Technology, Nessus, Devsecops, Vulnerability Analysis
- **Published:** July 11, 2026
- **Apply:** https://dejobs.org/x/x/1727792212F7425792FA82FA9A95EAE5/job/

## About the Role

Required:

 * TS/SCI Security Clearance with ability to obtain Polygraph
 * Bachelor's degree in Cybersecurity, Computer Science, or a related technical discipline (equivalent experience accepted).
 * 4+ years of security engineering or information assurance experience.
 * Experience implementing NIST RMF controls on DoD or IC systems.
 * Hands-on experience with STIG hardening, ACAS/Nessus, and security remediation.
 * DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent).
 * Ability to work on-site at a Government facility.

Desired:

 * Experience securing Kubernetes, containers, or cloud environments (AWS/C2S).
 * Experience integrating security scanning into CI/CD pipelines.
 * Prior experience supporting NGA or the Intelligence Community.

## Description

* Serve as a security engineer embedded with an Agile program delivering GEOINT capabilities to the National Geospatial-Intelligence Agency (NGA).
 * Work on-site at a Government facility, side by side with mission stakeholders and system owners.
 * Engineer security into modern, cloud-native systems rather than bolting it on after the fact.
 * Play a direct role in achieving and maintaining system authorizations for mission-critical capabilities., * Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
 * Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
 * Perform system hardening, vulnerability assessment, and remediation across development and production environments.
 * Support security assessment and authorization activities in coordination with Government ISSMs and assessors.
 * Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure.
 * Advise development teams on secure design, secure coding, and security architecture decisions.
 * Document security engineering artifacts supporting ATO and continuous monitoring.


## Related Videos

- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)