Cyber Defense Analyst II — Tier 2 CSOC

CACI International; St. Louis (MO); Vor Ort; USD 63.000 - 130.000; Vollzeit

Zusammenfassung

CACI International Inc. is seeking a Cyber Security Operations Specialist II/Tier 2 to join the 24x7 CSOC supporting NGA/TCS programs. You will lead investigations, perform deep-dive analytics in SIEMs, track threat actors, and document actions for rapid containment.

The role requires TS/SCI, DoD 8140/8570 baseline certifications, and the ability to work shifts. You will mentor junior analysts and coordinate with incident response teams to defend critical networks.

Qualifikationen

• Must be a US citizen with an active TS/SCI to start work
• Typically have a university degree (BA/BS) or equivalent experience and minimum 4 years of related work experience
• Hold current certifications that are compliant with DoD 8140.03 and DoD 8570.01-M IAT Level II and CSSP Analyst baseline certification lists
• Ability to work 1 of 5 shifts during the week, either 8 hours (weekdays) or 12 hours (weekends)

Aufgaben

• Lead investigations into escalated cyber events and build case files
• Utilize SIEM platforms to parse, analyze, and correlate log data
• Track threat intel and IoCs to identify adversary activity
• Document findings meticulously in the IT service management system
• Identify potential insider threats and escalate as needed
• Classify incidents per CJCSM 6510.01B criteria
• Support enterprise network architecture and critical missions
• Participate in major incident response operations and exercises

Kenntnisse

Security analysis

Incident response

Mentoring

Threat intelligence

Ausbildung

BA/BS or equivalent experience

Tools

Splunk

Elastic

Microsoft Sentinel

Jobbeschreibung

CACI International Inc. is seeking a Cyber Security Operations Specialist II/Tier 2 to join the 24x7 CSOC supporting NGA/TCS programs. You will lead investigations, perform deep-dive analytics in SIEMs, track threat actors, and document actions for rapid containment.

The role requires TS/SCI, DoD 8140/8570 baseline certifications, and the ability to work shifts. You will mentor junior analysts and coordinate with incident response teams to defend critical networks.