Cyber Data Analytics Engineer III — TS/SCI Clearance

CACI; Springfield (VA); On-site; USD 87,000 - 182,000; Full time

Job summary

CACI is seeking a Cyber Data Analysis Engineer III to design, build, and maintain the data environment that supports cybersecurity efforts. You will work with on‑premise and cloud systems, collecting log data from government agencies to ensure compliant, retrievable storage.

In this team‑oriented role you will design log pipelines using Cribl, ArcSight, Kafka, and AWS, manage Elasticsearch or Sentinel environments, troubleshoot data flows, and perform root‑cause analysis while maintaining uptime

Qualifications

• 2+ years Enterprise LAN networking
• 3+ years Unix/Linux Server Administration or similar
• 2+ years Windows Server Administration or similar
• 2+ years Hands-on AWS experience
• Active Top Secret/SCI Clearance
• DOD 8570 IAT Level II and CSSP Infrastructure certifications within 120 days

Responsibilities

• Help customers send their log data through enterprise networks to a destination.
• Design, build, and maintain log data collection pipelines with Cribl, ArcSight, Kafka, AWS, Linux, and Windows.
• Design, build, and maintain log data management environments using Elasticsearch or Sentinel.
• Research resources needed to optimize Linux-hosted products and cloud services.
• Troubleshoot data flow issues from SIEM to storage or SIEM.
• Troubleshoot data display or storage issues within SIEM.
• Perform root cause analysis for complex issues.
• Ensure product uptime.
• Maintain appropriate versions per agency policies.
• Develop or improve processes using scripts, Ansible, or AWS tools.
• Document tasks, processes, changes, and product statuses.
• Provide team training regarding tasks and products.
• Interact with internal and external customers through all project phases.
• Be aware of customer needs and respond promptly.
• Demonstrate attention to detail.
• Some on-call including nights/weekends (rare).

Skills

Enterprise LAN networking

Unix/Linux Server Administration

Windows Server Administration

AWS

Clearance TS/SCI

Tools

Cribl

ArcSight

Kafka

Elasticsearch

Sentinel

Kubernetes

Ansible

Git

YAML

Python

Bash

Ruby

Job description

CACI is seeking a Cyber Data Analysis Engineer III to design, build, and maintain the data environment that supports cybersecurity efforts. You will work with on‑premise and cloud systems, collecting log data from government agencies to ensure compliant, retrievable storage.

In this team‑oriented role you will design log pipelines using Cribl, ArcSight, Kafka, and AWS, manage Elasticsearch or Sentinel environments, troubleshoot data flows, and perform root‑cause analysis while maintaining uptime