> Markdown version of [/jobs/ext/2077143-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/2077143-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Engineer

- **Company:** CACI International Inc.
- **Location:** Reston, VA, United States
- **Experience:** Starter
- **Salary:** $53,100.0 - $106,300.0
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Cyber Security, Information Systems, Network Architecture, Network Diagrams, Systems Development Life Cycle, Fortify (Software), Zero Trust Network Access, Software Engineering, Information Technology, Devsecops, Static Application Security Testing, Vulnerability Analysis
- **Published:** August 16, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3354579505&tx=KJ9999FFU&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

Required:

 * Active Secret security clearance (or ability to obtain).
 * Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field(or 4+ years of equivalent experience).
 * 1-3 years of hands-on experience with RMF processes and the ATO lifecycle.
 * Experience with:
 * Software/application vulnerability scanning
 * DISA STIG implementation
 * Tools such as eMASS, ACAS, SCC Tool
 * Familiarity with FedRAMP, DISA APL, or DevSecOps concepts.
 * Strong technical writing skills for security documentation.
 * Ability to work independently and collaboratively.

Professional Certifications (DOD 8570 IAT Level II)

 * Required at hire: Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP
 * Required within 6 months: SecurityX (IASAE transition preparation)
 * Highly desired: CASP+, CISSP

Desired:

 * Experience with Fortify or other SAST tools.
 * Familiarity with CMMC or NIST 800-171 frameworks.
 * Knowledge of SSDLC and Security Engineering principles.
 * Understanding of DevSecOps, Agile methodologies, and Zero Trust Architecture.
 * Previous experience supporting federal government or DoD customers.
 * Ability to apply innovative methods and contribute to new security solutions.

## Description

CACI is seeking a Cyber Security Engineer to support our USTRANSCOM customer. This role is ideal for a cybersecurity professional with hands-on experience in the Risk Management Framework (RMF), NIST guidelines, security assessments, and implementation of security controls. You will directly contribute to achieving Authorization to Operate (ATO), reducing organizational risk, and strengthening mission-critical defense capabilities across DoD environments, RMF & Compliance Management

 * Manage the full RMF accreditation lifecycle and maintain continuous compliance for DoD computing environments.
 * Create, manage, and maintain RMF artifacts throughout the ATO lifecycle.
 * Generate and review System Security Plans (SSPs), network diagrams, security architecture documentation, and compliance reports.
 * Develop and track POA&Ms to support remediation efforts.
 * Assist the ISSM with continuous monitoring activities.

Technical Security Implementation

 * Perform hands-on security assessments of enclave and network infrastructure devices, primarily within Windows environments.
 * Design, implement, and validate security controls in accordance with NIST 800-53, DISA STIGs, DFARS, and CMMC frameworks.
 * Conduct software vulnerability scanning and triage findings across application portfolios.
 * Interpret and apply DISA STIG requirements using SCC Tool, eMASS, and ACAS.

Collaboration & Process Improvement

 * Work with development, operations, and cybersecurity teams to embed security throughout the SDLC.
 * Identify and recommend process improvements to strengthen security and enhance productivity.
 * Provide best-practice guidance for secure system and software development.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [How Data is Shaping our Games](https://www.wearedevelopers.com/videos/176-how-data-is-shaping-our-games)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)