24/7 Cyber Monitoring Analyst (TS/SCI)

Socket.dev; Hampton (VA); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI is seeking a Cyber Monitoring Analyst to join the Cyber Security Incident Response Team supporting the AF DCGS program located onsite at Langley AFB, VA. The role requires real-time threat detection, log analysis, and escalation in a high-tempo 24/7 environment.

You will use Elastic Stack for monitoring, document incidents, and coordinate with T1–T3 teams, with TS/SCI clearance and five years of cyber operations experience.

Qualifications

• Active Top Secret/SCI clearance required.
• Bachelor’s degree in IT Technology, Computer Science, or related field with 5+ years in cyber operations or monitoring.
• DOD 8140 (8570) IAT Level II (Security+ or equivalent).
• Deep understanding of Incident Response lifecycle, especially in detection and escalation phases.
• Proficiency with Elastic Stack for log analysis and monitoring.

Responsibilities

• Continuously monitor security alerts and logs to identify threats across the OA DCGS weapon system.
• Utilize ELK/Elastic Stack for real-time log analysis, threat detection, and investigations.
• Escalate security events using ticketing systems and report to internal analysts and external stakeholders.
• Follow SOPs and incident response playbooks to ensure consistent monitoring.
• Document monitoring activities, incident timelines, and case notes for post-incident reviews.
• Review SIEM alerts and threat intel to identify IOCs and anomalous activity.
• Coordinate with incident response, threat hunting, and vulnerability teams for handoffs.
• Operate independently during shifts, responding to alerts with urgency.
• Support penetration testing evaluations by responding to simulated threats to measure KPIs.

Skills

Top Secret/SCI clearance

Real-time threat detection

Windows/Linux

Independent work

Education

Bachelor’s degree in IT Technology, Computer Science, or related field

Tools

Elastic Stack

Job description

CACI is seeking a Cyber Monitoring Analyst to join the Cyber Security Incident Response Team supporting the AF DCGS program located onsite at Langley AFB, VA. The role requires real-time threat detection, log analysis, and escalation in a high-tempo 24/7 environment.

You will use Elastic Stack for monitoring, document incidents, and coordinate with T1–T3 teams, with TS/SCI clearance and five years of cyber operations experience.