Cyber Data Analytics Engineer - SIEM & Cloud Logs

CACI; St. Louis (MO); On-site; USD 120,000 - 160,000; Full time

Job summary

CACI is seeking a Cyber Data Analyst Engineer to design, build, and maintain data collection and management pipelines supporting cybersecurity efforts. You will work with on-premise and cloud systems, collecting log data from government agencies and ensuring secure, retrievable storage.

The role requires active TS/SCI clearance, a BS in CS/IT, and several years of experience in UNIX/Linux, Windows, and AWS environments. Expect collaboration across teams and potential on-call support.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree in CS/IT or related field.
• 5+ years of relevant experience.
• DOD 8570 IAT Level II and CSSP Infrastructure Support certifications within 120 days.
• 2+ years Enterprise LAN networking; 3+ years Unix/Linux Server Administration; 2+ years Windows Server Administration; 2+ years AWS experience.

Responsibilities

• Help customers send their log data through enterprise networks to a destination.
• Design, build, and maintain log data collection pipelines (Cribl, ArcSight, Kafka, AWS, Linux, Windows).
• Design, build, and maintain log data management environments (Elasticsearch or Sentinel).
• Troubleshoot data flow and storage issues in SIEM environments.
• Document tasks, processes, and product statuses; provide team training.

Skills

Top Secret/SCI clearance

Strong communication skills

Education

Bachelor's degree in Computer Science/IT or related field

Tools

AWS

Linux

Windows Server

ArcSight

Kafka

Elasticsearch

Sentinel

Cribl

Ansible

Job description

CACI is seeking a Cyber Data Analyst Engineer to design, build, and maintain data collection and management pipelines supporting cybersecurity efforts. You will work with on-premise and cloud systems, collecting log data from government agencies and ensuring secure, retrievable storage.

The role requires active TS/SCI clearance, a BS in CS/IT, and several years of experience in UNIX/Linux, Windows, and AWS environments. Expect collaboration across teams and potential on-call support.