Cyber Incident Response Analyst

CACI International; Hampton (VA); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International is seeking a Cyber Incident Response Analyst to join the IRT for the AF DCGS program at Langley AFB, VA. The role focuses on leading IR investigations, log analysis with ELK, and developing SOPs to protect the OA DCGS weapon system.

The ideal candidate has TS/SCI clearance, a IT/CS degree with 5+ years experience, and expertise in IR lifecycle, SIEMs, and cloud/security tools. Travel is local with up to 10% involvement and a 24/7 shift schedule is required.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree in IT/CS or related field with 5+ years of experience, degree may be substituted.
• DOD 8140 (8570) IAT Level II (Security+ or equivalent).
• In-depth understanding of the Incident Response lifecycle.
• Familiarity with cyber security tools and procedures.
• Willing to work in a shift-based environment, including weekends/holidays.

Responsibilities

• Lead and assist in incident response investigations through all phases (detection, containment, eradication, recovery, lessons learned).
• Utilize ELK/Elastic Stack to perform log analysis, threat detection, and investigations; create security incident reports and dashboards.
• Escalate and document internal/external security incidents through ticketing and reporting processes.
• Design, implement, and maintain cybersecurity SOPs and IR playbooks.
• Maintain documentation of IR processes and case notes; ensure testing/evaluations are documented.
• Support proactive threat hunting and vulnerability assessments.
• Analyze and correlate logs from varied data sources to identify patterns and anomalies.
• Apply knowledge of CVEs to incident handling and remediation.

Skills

IR lifecycle

Security best practices

Analytical skills

Communication skills

Problem solving

Education

Bachelor's degree in IT/CS or related field

DOD 8140/8570 IAT Level II

Tools

Elastic Stack

Tanium

Trellix

Eracent

ACAS

AWS

Job description

Job Title: Cyber Incident Response Analyst

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:

Our client is seeking a highly motivated Incident Response Analyst that will join the Cyber Security Incident Response Team (IRT) supporting the AF DCGS program located onsite at Langley AFB, Va. The ideal candidate will have a solid understanding of Windows, Linux, and Cloud environments, networking concepts, and system administration fundamentals. They should also possess hands‑on experience with SIEMs, or other cyber tools utilized for detection and analysis. In addition, the candidate must demonstrate familiarity with the incident response (IR) process, including the ability to apply established procedures during investigations, expedite findings appropriately, and provide clear actionable reporting to appropriate stakeholders and/or affected teams with minimal supervision.

Responsibilities:

• Lead and assist in incident response investigations through all phases (detection, containment, eradication, recovery, lessons learned) to ensure the confidentiality, integrity, and availability of the OA DCGS weapon system.
• Utilize ELK/Elastic Stack to perform log analysis, threat detection, and investigations; Create and maintain security incident reports and dashboards.
• Escalate and document internal/external security incidents through appropriate ticketing and reporting processing
• Design, implement, and maintain cybersecurity Standard Operating Procedures (SOPs) and incident response playbooks
• Maintain documentation of Incident Response (IR) processes and case notes; Ensure security testing and evaluations are completed and properly documented.
• Support proactive threat hunting and vulnerability assessments
• Analyze and correlate logs from varied data sources to identify patterns and anomalies
• Apply knowledge of Zero‑Day vulnerabilities and Common Vulnerabilities and Exposures (CVEs) to incident handling and remediation
• Collaborate with cross‑functional teams and external stakeholders as needed
• Provide guidance for securing information systems and support cyber vulnerability penetration assessments.

Qualifications:

Required:

• Active Top Secret/SCI security clearance.
• Bachelor’s degree in IT Technology, Computer Science, or related field with 5+ years of experience. Degree may be substituted with equivalent experience.
• DOD 8140 (8570) IAT Level II (Security+ or equivalent).
• In-depth understanding of the Incident Response lifecycle
• Familiarity with cyber security tools and procedures
• Strong problem‑solving and analytical skills
• Knowledge of security best practices and standards, including NIST, ISO, and SOC operations.
• Effective written and verbal communication skills for documentation and collaboration
• Willing and able to work in a shift‑based environment, including weekends and holidays, as part of our 24/7 operations.

Desired:

• AF DCGS experience.
• Proficiency in using the Elastic Stack (Elasticsearch, Logstash, Kibana)
• Four to seven years of intelligence network communications or Systems Administration experience across Windows and Linux platforms
• Experience with AWS and/or other cloud security platforms
• Background as an ISSO, including STIG/SCAP and vulnerability management
• Familiarity with tools such as Tanium, Trellix, Eracent and ACAS
• Basic scripting skills (Python, PowerShell, Bash)
• Holds industry‑recognised certifications such as CySA+, PenTest+, GCIH, or equivalent credentials.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high‑performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$75,200-$158,100

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.