Security Engineer

Job Title:

Security Engineer Job Category:
Information Technology Time Type:
Full time Minimum Clearance Required to Start:
None Employee Type:
Regular Percentage of

Travel Required:

None Type of Travel:
None*
*
* The Opportunity:

CACI is seeking a dedicated Security Engineer to support the Department of Homeland Security (DHS) Office of the Inspector General (OIG).

This role offers a unique opportunity to safeguard cutting-edge AI and data analytics capabilities that strengthen national security oversight through investigative, audit, and inspection operations.

As a Security Engineer, you will design, implement, and maintain comprehensive security controls that protect sensitive investigative data, ensure compliance with federal security requirements, and enable secure AI and analytics capabilities. You will implement role-based access controls, encryption, logging and monitoring infrastructure, and data protection measures across AI applications, enterprise data platforms, and cloud infrastructure. From integrating with SIEM tools and enforcing controls for Law Enforcement Sensitive (LES) data to supporting Authority to Operate (ATO) processes and conducting security testing, you will be the guardian of data security and compliance.

Working within Azure Government environments, you will ensure that transformational AI and data capabilities meet the highest standards of federal cybersecurity. Join us to make a meaningful impact by securing mission-critical systems on a program of national importance.

Responsibilities:

Design, implement, and maintain comprehensive security controls including application and infrastructure logging, access controls, audit trails, encryption, and least-privilege access policies across AI platforms, data environments, and mission applications

Implement and enforce role-based access controls (RBAC), data security policies, and protective measures for sensitive data including Sensitive Personally Identifiable Information (SPII), Law Enforcement Sensitive (LES), and For Official Use Only (FOUO) data consistent with DHS OIG policies

Integrate applications, data platforms, and cloud infrastructure with OIG-approved Security Information and Event Management (SIEM) systems and log aggregation tools to enable security monitoring, alerting, and incident response

Monitor and analyze security logs, access patterns, and user behavior to detect unauthorized access attempts, anomalous activity, data exfiltration risks, and potential security incidents across all platform layers

Support Authority to Operate (ATO) processes including security control implementation documentation, security testing coordination, vulnerability assessment, remediation evidence preparation, and ongoing compliance monitoring aligned with NIST 800-53 and FedRAMP requirements

Perform comprehensive security testing including vulnerability assessments, penetration testing coordination, secure code review, configuration assessments, and validation that pilot applications and production systems meet security requirements

Implement application-level security controls including input validation, output encoding, authentication/authorization mechanisms, session management, secure API design, and protection against OWASP Top 10 vulnerabilities

Provide specialized forensic analysis and incident response support including server/virtual machine reconstruction, security-focused data analysis, digital evidence preservation, and technical declarations for investigative or administrative matters

Coordinate with DHS OIG cybersecurity teams, privacy officers, Dev Sec Ops  teams, and Authorizing Officials to ensure integrated security posture, compliance with enterprise security policies, and alignment with continuous monitoring programs

Develop and maintain security documentation including security architecture diagrams, control implementation evidence, configuration standards, incident response procedures, and security knowledge transfer materials

Qualifications:

Required –Bachelor's degree + 7 years of experience in cybersecurity, information security, security engineering, or related field; equivalencies considered (Master's + 4 years; 13 years with no degree; AA + 9 years)
Must be able to obtain DHS / EOD Clearance.

Proven experience implementing security controls, access management, encryption, and logging/monitoring solutions for enterprise applications and cloud infrastructure

Strong understanding of federal security requirements including NIST 800-53,…