C

CACI

Provides government contracting technology and services

Automation Engineer/Tester

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time$63.3k - $129.7k

About the Job

Requirements

  • Interim Secret clearance, minimum.
  • DoD 8140 Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) certification; one of CEH (Certified Ethical Hacker), CFR (CyberSec First Responder), Cloud+, GSEC, PenTest+, Security+, or SSCP certifications.
  • At least 4 years of experience in security automation, compliance testing, or DevSecOps.
  • Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.
  • Knowledge of SCAP Compliance Checker (SCC) for XCCDF, ARF, and CKL validation.
  • Experience automating Trellix Policy Auditor STIG compliance scanning.
  • Proficiency with Tricentis test automation for SAP and Mendix regression testing.
  • Experience with SonarQube quality gates and CI/CD pipeline integration.
  • Familiarity with Fortify SAST and software bill of materials generation using CycloneDX or SPDX.
  • Experience developing GitLab CI/CD pipelines and implementing security gates.
  • Experience with infrastructure-as-code testing, including Terraform or CloudFormation validation.
  • Experience integrating security-scanning results into AWS Security Hub.
  • Experience developing Splunk ES queries and alert automation.
  • Experience developing Splunk SOAR playbooks with automated response targets of 30–90 seconds.
  • Experience with ESCU (Enterprise Security Content Updates) detection rules.
  • Experience integrating with the eMASS API for automated evidence upload.
  • Experience developing AWS Config conformance packs for continuous compliance.
  • Experience automating AWS Audit Manager controls.
  • Experience automating CORA evidence pipelines.

Responsibilities

  • Support ISSO/ISSE security compliance, testing, and continuous-monitoring automation for an IL5 multi-cloud environment.

Desired Qualifications

  • Python, PowerShell, or Bash scripting.
  • AWS GovCloud experience with Lambda, EventBridge, or Step Functions.
  • Understanding of RMF continuous-monitoring requirements.
  • Experience with SAFe Agile methodology and PI planning.

About the Company

CACI

Provides government contracting technology and services

CACI International Inc. provides technology and professional services to U.S. government clients, focusing on national security and modernization. It earns most of its revenue through long-term government contracts that fund engineering, intelligence, logistics, cybersecurity, data analytics, and IT solutions for defense, intelligence, and federal civilian agencies. Its products and services work by delivering specialized technical expertise, secure systems, and mission-support capabilities that help agencies run operations more efficiently and securely. CACI differentiates itself through its deep domain knowledge in national security, a proven track record of delivering high-quality, reliable solutions, and a skilled workforce that can execute complex, long-duration contracts. The company’s goal is to be a trusted partner for government modernization needs by providing advanced technology solutions and mission support that enhance national security and operational effectiveness.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1962

Recently Posted Jobs

Explore more opportunities at CACI

See more jobs