Cybersecurity Vulnerability Engineer

CA CI is seeking an experienced Cybersecurity Vulnerability Engineer to support a Department of Defense customer on site at Fort Bragg, NC. The role focuses on deploying and maintaining vulnerability scanning across hybrid environments, validating findings, and building remediation and automation workflows aligned to established security frameworks.

Location

Fort Bragg, NC (onsite)

Compensation

USD 85,800 - 180,200 per yearly

Role Responsibilities

• Deploy and maintain scanning tools across network, application, cloud, container, and endpoint environments.
• Run authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
• Validate vulnerabilities using technical analysis, PoC testing, and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack-path feasibility.
• Perform root-cause analysis for recurring or systemic vulnerabilities and propose engineering-level fixes.
• Develop remediation playbooks, secure configuration baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
• Integrate vulnerability detection into CI/CD, IaC pipelines, and pre-production environments.
• Support remediation validation through re-scanning, configuration checks, and targeted testing.
• Enhance attack surface discovery for internet-facing, ephemeral, and cloud-native assets.
• Identify gaps in scanning coverage, asset visibility, and control validation, and propose improvements.
• Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
• Support incident response during vulnerability surge events with rapid scanning and technical remediation assistance.
• Maintain accurate asset-to-vulnerability mappings to support analytics and automation.
• Evaluate emerging technologies and support adoption of new scanning and exposure-management capabilities.
• Assess vulnerabilities in AI/ML/LLM platforms and other emerging technologies.
• Ensure work aligns with NIST and industry frameworks including NIST SP 800-40, NIST SP 800-53, and CIS Controls.

Minimum Qualifications

• DoD Active TS/SCI Clearance.
• Bachelor's Degree with a minimum 7 years experience in Cybersecurity or equivalent.
• Strong understanding of operating systems, networking, cloud platforms, and application architectures.
• Hands-on experience with vulnerability scanners, configuration assessment tools, and security automation.

Additional Requirements

• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Ability to read and understand exploit code, advisories, and configuration weaknesses.
• Strong troubleshooting and systems analysis skills.
• Experience integrating security tools with CI/CD, cloud APIs, or infrastructure-as-code workflows.
• Experience with container security, Kubernetes, or cloud-native scanning.
• Familiarity with attack-path analysis or exposure-management platforms.
• Experience building custom detection logic or performing PoC exploit validation.
• Knowledge of AI/ML/LLM platform security or emerging technology risks.

Preferred Certifications

• DoD 8570 / 8140 compliant certification preferred such as: CISSP, SecurityX, CySA+, GIAC.

Tools and Technologies

Python, PowerShell, Bash, APIs, CI/CD, IaC, cloud platforms, ticketing systems, Kubernetes, AI/ML/LLM, NIST SP 800-40, NIST SP 800-53, CIS Controls

Benefits

• Healthcare
• Wellness
• Financial
• Retirement
• Family support
• Continuing education
• Time off benefits

Travel Requirements

• Percentage of Travel Required: Up to 10%
• Type of Travel: Continental US

Opportunity

• Support the customer on site at Fort Bragg, NC.
• The successful candidate must be a self-starter with an advanced level.