Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 10 hours ago

Cloud/DevOps Exploitation Specialist

CACi1,466 open roles

Where
US
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCloud/DevOps Exploitation SpecialistCACi · US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CACi's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.4% of postings close within 7 days. Measured by our own scanner across the market. CACi postings stay open a median of 8 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.4%7 days
  4. 20.0%14 days
  5. 35.5%30 days
  6. 58.6%60 days
This job: posted 10 hours ago

CACi median: 8 days open

The posting

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cloud/DevOps Exploitation Specialist based in the United States.

Join a mission-driven cybersecurity team dedicated to strengthening the security and resilience of federal IT infrastructure. In this hands-on role, you will build, secure, and assess AWS environments that support continuous attack-surface testing and proactive vulnerability discovery. You will leverage advanced Terraform and Ansible automation to create repeatable, scalable, and auditable assessment infrastructure. Working across cloud platforms, CI/CD pipelines, containers, and Kubernetes, you will identify and safely validate security weaknesses within authorized testing environments. Your expertise will help uncover exploitable attack paths, strengthen defenses, and deliver actionable remediation guidance to federal agencies. This fully remote opportunity combines cloud engineering, DevSecOps, and offensive security practices in support of critical national cybersecurity missions.

Accountabilities:

  • Cloud Infrastructure Engineering: Design, implement, and maintain secure AWS infrastructure, including networking, IAM, compute, storage, data services, logging, and security controls, using reusable Terraform modules and Ansible automation.
  • Infrastructure as Code (IaC): Establish and maintain secure, version-controlled infrastructure workflows covering code reviews, testing, remote state management, secrets management, approvals, deployment, rollback, and change auditing.
  • CI/CD Pipeline Development: Build and maintain automated pipelines that deploy assessment infrastructure and integrate infrastructure-as-code validation, dependency analysis, secrets detection, container and registry scanning, static and dynamic application security testing, and vulnerability scanning.
  • Cloud Security Assessment: Evaluate AWS environments, CI/CD workflows, container images, registries, Kubernetes configurations, and infrastructure-as-code templates to identify and validate exploitable security weaknesses within approved scopes.
  • Attack Path Validation: Safely assess IAM privilege escalation, lateral movement, software supply-chain vulnerabilities, data exposure, serverless security weaknesses, and other cloud attack paths in accordance with established rules of engagement.
  • Kubernetes and Container Security: Test Kubernetes and Amazon EKS governance controls, service-account privileges, container configurations, and potential container breakout vectors.
  • IaC Vulnerability Investigation: Analyze and validate infrastructure misconfigurations identified by tools such as Checkov and tfsec, demonstrating realistic exploitation scenarios and their potential impact.
  • Infrastructure Hardening and Monitoring: Secure and monitor assessment environments while maintaining the flexibility required for reconnaissance, scanning, controlled exploitation, and rapid incident response.
  • Automation and Technical Documentation: Develop Python, Bash, and PowerShell scripts, APIs, and operational tools. Maintain architecture diagrams, runbooks, module documentation, recovery procedures, and other technical records.
  • Cross-Functional Collaboration: Work closely with attack-surface testing engineers and customer platform owners to troubleshoot technical issues, optimize performance and costs, and deliver reliable, secure, and repeatable assessment capabilities.
  • Compliance and Operational Governance: Follow customer-approved tools, data-handling policies, evidence-management controls, deconfliction procedures, and stop-work requirements throughout all assessment activities.
  • Professional Experience: At least 5 years of experience in cloud engineering, DevOps, DevSecOps, platform engineering, or cloud security, including a minimum of 3 years of hands-on AWS and infrastructure-as-code experience.
  • Citizenship and Clearance: U.S. citizenship is required. Candidates must be eligible to access sensitive information and able to obtain a Public Trust fitness determination at the High Risk level.
  • Terraform and Ansible: Advanced practical experience using Terraform and Ansible in production environments, including reusable modules, remote state, secrets management, testing, approval workflows, and repeatable deployments.
  • AWS Architecture and Security: Strong knowledge of AWS IAM, VPC and networking, EC2, S3, KMS, CloudTrail, serverless technologies, containers, and data-service security.
  • CI/CD and Container Ecosystems: Hands-on experience with tools such as GitLab CI, GitHub Actions, Jenkins, Docker, Kubernetes/EKS, and Amazon ECR or comparable platforms.
  • Security Testing Tools: Experience with security assessment and vulnerability detection tools such as Checkov, tfsec, Trivy, Grype, Prowler, ScoutSuite, Semgrep, SAST/DAST solutions, secrets scanners, and cloud-native security services.
  • Scripting and Systems Knowledge: Strong Linux, networking, and Git skills, along with practical scripting experience in Python, Bash, or PowerShell.
  • Secure Assessment Practices: Ability to operate within customer-provided remote environments, use approved tools, follow rules of engagement, protect sensitive data, maintain assessment evidence, coordinate testing activities, and comply with stop-work criteria.
  • Preferred Certifications: AWS Certified Security – Specialty, AWS Solutions Architect or DevOps Engineer Professional, HashiCorp Terraform Associate, Certified Kubernetes Security Specialist (CKS), Certified Kubernetes Administrator (CKA), GIAC Cloud Security Automation (GCSA), or equivalent credentials.
  • Offensive Security Infrastructure: Experience building short-lived, segmented security assessment environments with robust auditing, controlled access, and reliable teardown procedures.
  • Cloud Exploitation Experience: Familiarity with authorized testing of IAM, CI/CD, containers, registries, Kubernetes, serverless services, metadata services, and infrastructure-as-code weaknesses.
  • Advanced Security Practices: Knowledge of policy as code, Open Policy Agent (OPA), Conftest, software bills of materials (SBOMs), software supply-chain security, observability, and cloud cost and performance optimization.
  • Federal and Regulated Environments: Experience with federal cloud platforms, FedRAMP, AWS GovCloud, DHS/CISA programs, or other high-assurance environments is highly desirable.
  • Communication and Collaboration: Strong analytical thinking, technical documentation, problem-solving, and teamwork skills, with the ability to communicate findings clearly and collaborate effectively with engineers and customer stakeholders.
  • Competitive Salary: Annual salary range of $90,300–$189,600, depending on experience, qualifications, location, certifications, and contract-related factors.
  • Fully Remote Work: Work remotely from any U.S. state, with occasional travel of up to 10% within the continental United States.
  • Flexible Time Off: Access to a flexible time-off benefit designed to support work-life balance.
  • Comprehensive Healthcare: Healthcare coverage and benefits designed to support employees and their families.
  • Wellness Programs: Access to wellness resources and benefits that promote employee well-being.
  • Retirement and Financial Benefits: Financial planning and retirement benefits to support long-term financial security.
  • Family Support: Benefits and resources designed to support employees and their families.
  • Professional Development: Access to learning resources, continuing education, and development opportunities to strengthen technical expertise and advance career goals.
  • Mission-Driven Work: The opportunity to contribute to federal cybersecurity initiatives that protect government networks and strengthen national cyber resilience.
  • Collaborative Environment: Work alongside skilled cybersecurity and cloud engineering professionals in a culture emphasizing integrity, innovation, accountability, and continuous improvement.
  • Career Growth: Opportunities to develop advanced expertise in cloud security, infrastructure automation, DevSecOps, and authorized offensive security assessments.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CACi's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CACi's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CACi's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.