Cyber Data Analytics Engineer

CACI International Inc; St. Louis (MO); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International Inc. is seeking a Cyber Data Analyst Engineer to design, build, and maintain data pipelines for cybersecurity analytics. You will work with on-premise and cloud systems to collect log data from government agencies, ensuring secure, retrievable storage and efficient data display.

Strong collaboration, documentation, and on-call readiness are required. You will leverage Cribl, ArcSight, Kafka, Elasticsearch, Sentinel, and AWS tools on Linux and Windows servers, while staying

Qualifications

• Active Top Secret/SCI security clearance
• Bachelor's degree in computer science, Information Technology, or a related field
• Minimum 5 years of relevant experience
• DOD 8570 IAT Level II and CSSP Infrastructure Support certifications (within 120 days of hire)
• 2+ years Enterprise LAN networking experience
• 3+ years of Unix/Linux Server Administration or similar experience
• 2+ years Windows Server Administration or similar experience
• 2+ years Hands-on AWS experience
• Good oral and written communications
• Good listening and comprehension

Responsibilities

• Help customers send their log data through one or more enterprise networks to a specific destination.
• Design, build, and maintain log data collection pipelines consisting of products like Cribl, ArcSight, Kafka, various AWS products, Linux servers, and Microsoft servers.
• Design, build, and maintain log data management environments using products such as Elasticsearch or Sentinel.
• Research and identify the physical or cloud resources needed to optimize support for specific Linux systems or hosted products.
• Troubleshoot any data flow issues from the SIEM data collection point to the SIEM or designated long-term storage destination.
• Troubleshoot any data display or data storage issues within the SIEM environment.
• Perform root cause analysis for complex issues.
• Ensure product uptime.
• Maintain appropriate application, system, and product versions according to applicable agency enterprise policies.
• Develop or improve processes using tools like scripts, Ansible, or AWS products.
• Document tasks, processes, changes, and product statuses.
• Provide team training regarding tasks and products.
• Interact with internal and external customers during all project phases.
• Be aware of customer needs.
• Respond to customer inquiries in a timely manner.
• Demonstrate attention to detail.
• Some on-call including nights/weekends (very rare).

Skills

Security clearance TS/SCI

Networking (Enterprise LAN)

Unix/Linux administration

Windows Server administration

AWS

Communication skills

Education

Bachelor's degree in Computer Science/IT

Tools

Cribl

ArcSight

Kafka

AWS

Elasticsearch

Sentinel

Kubernetes

Ansible

Git

Job description

CACI International Inc. is seeking a Cyber Data Analyst Engineer to design, build, and maintain data pipelines for cybersecurity analytics. You will work with on-premise and cloud systems to collect log data from government agencies, ensuring secure, retrievable storage and efficient data display.

Strong collaboration, documentation, and on-call readiness are required. You will leverage Cribl, ArcSight, Kafka, Elasticsearch, Sentinel, and AWS tools on Linux and Windows servers, while staying