Security Engineer

CACI International Inc is seeking a Security Engineer to support the Department of Homeland Security Office of the Inspector General. The role is responsible for designing and maintaining security controls, protecting sensitive investigative data, securing AI and analytics capabilities, supporting ATO and compliance processes, and conducting security monitoring and testing in Azure Government environments.

Responsibilities:

• Design, implement, and maintain comprehensive security controls including application and infrastructure logging, access controls, audit trails, encryption, and least-privilege access policies across AI platforms, data environments, and mission applications
• Implement and enforce role-based access controls (RBAC), data security policies, and protective measures for sensitive data including Sensitive Personally Identifiable Information (SPII), Law Enforcement Sensitive (LES), and For Official Use Only (FOUO) data consistent with DHS OIG policies
• Integrate applications, data platforms, and cloud infrastructure with OIG-approved Security Information and Event Management (SIEM) systems and log aggregation tools to enable security monitoring, alerting, and incident response
• Monitor and analyze security logs, access patterns, and user behavior to detect unauthorized access attempts, anomalous activity, data exfiltration risks, and potential security incidents across all platform layers
• Support Authority to Operate (ATO) processes including security control implementation documentation, security testing coordination, vulnerability assessment, remediation evidence preparation, and ongoing compliance monitoring aligned with NIST 800-53 and FedRAMP requirements
• Perform comprehensive security testing including vulnerability assessments, penetration testing coordination, secure code review, configuration assessments, and validation that pilot applications and production systems meet security requirements
• Implement application-level security controls including input validation, output encoding, authentication/authorization mechanisms, session management, secure API design, and protection against OWASP Top 10 vulnerabilities
• Provide specialized forensic analysis and incident response support including server/virtual machine reconstruction, security-focused data analysis, digital evidence preservation, and technical declarations for investigative or administrative matters
• Coordinate with DHS OIG cybersecurity teams, privacy officers, DevSecOps teams, and Authorizing Officials to ensure integrated security posture, compliance with enterprise security policies, and alignment with continuous monitoring programs
• Develop and maintain security documentation including security architecture diagrams, control implementation evidence, configuration standards, incident response procedures, and security knowledge transfer materials

Requirements:

• Bachelor's degree + 7 years of experience in cybersecurity, information security, security engineering, or related field; equivalencies considered (Master's + 4 years; 13 years with no degree; AA + 9 years)
• Must be able to obtain DHS / EOD Clearance
• Proven experience implementing security controls, access management, encryption, and logging/monitoring solutions for enterprise applications and cloud infrastructure
• Strong understanding of federal security requirements including NIST 800-53, FedRAMP, FISMA, and experience supporting Authority to Operate (ATO) processes and continuous monitoring programs
• Hands-on experience with cloud security in Azure (or AWS/GCP) including identity and access management (Entra ID/Azure AD), network security, encryption services, and security monitoring tools
• Demonstrated experience with SIEM platforms, log analysis, security monitoring, intrusion detection, and incident response practices
• Experience securing AI/ML applications, data analytics platforms, or sensitive data environments in federal government, law enforcement, or national security contexts with understanding of investigative data handling requirements
• Hands-on experience with Azure Government or other secure government cloud environments (AWS GovCloud) including implementation of security controls for FedRAMP High or DoD Impact Level environments
• Professional security certifications such as CISSP, CEH, GIAC (GSEC, GCIH, GCIA), Security+, or equivalent demonstrating advanced security knowledge and commitment to the profession