Cyber Security Engineer - NSS Tools

About the role

CACI is hiring a Cyber Security Engineer for its Network Security Services - Network Defense team, based in St. Louis. The role develops, deploys and maintains cybersecurity tools that defend the National Geospatial-Intelligence Agency (NGA) networks, supporting the NGA GEOINT mission across multiple networks and locations worldwide. The position requires a TS/SCI clearance and up to 10% local travel.

Key responsibilities

• Design, implement and deliver task- or project-based defensive cybersecurity solutions for on-premise and cloud environments.
• Deploy, configure and maintain network security tools, keeping software, updates, core services and configurations within design specifications.
• Maintain network architecture diagrams, inventories and licensing status for the team's capabilities.
• Provide written reports and oral briefings to contract and government leadership.
• Coordinate with stakeholders to ensure task completion and customer satisfaction.
• Evaluate emerging network security technologies and recommend configuration changes and upgrades aligned with industry best practices.
• Use networking protocol knowledge and tools such as tcpdump, traceroute, netstat and nslookup to troubleshoot and resolve issues.

Required profile

• Active TS/SCI security clearance and ability to obtain and maintain a CI polygraph.
• DOD 8570 IAT II certification (e.g., Security+, CySA+) and DOD 8570 CSSP Infrastructure Support certification (e.g., CEH, CySA+).
• Weekend and evening availability and ability to work independently with little direction.
• Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Electrical Engineering or a related field.
• 7+ years of technical experience in network security technologies, tools and techniques, including 5+ years with large-scale enterprise or global networks.
• Understanding of DoW, DISA and IC standards and processes, and of DoW network architecture.

Required skills

• Linux system administration, including scripting and automation.
• System logging configuration, log analysis and secure networking services.
• Familiarity with DoW PKI, Kerberos, LDAP, Active Directory and authentication (SAML, OAuth).
• Desired: knowledge of NDR and IDS/IPS platforms (VectraAI, Extrahop, Darktrace, Corelight, Cisco Firepower, Trellix NX), packet broker/visibility platforms (Gigamon, Ixia, Garland), packet capture platforms (NetWitness, Axellio, Endace) and email security platforms (Trellix EX, Cisco Secure Email Gateway, Ironport, Proofpoint, Abnormal).

What we offer

• Proposed pay range of $75,200-$158,100, depending on location, contract category, experience, skills and education.
• Healthcare, wellness, financial, retirement, family support, continuing education and time-off benefits.
• A culture of integrity, a flexible time-off benefit and access to learning resources.