Cyber Incident Response Analyst – 24/7 IR, TS/SCI

CACI International

Hampton (VA)

On-site

USD 75,000 - 158,000

Full time

11 days ago

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

CACI International is seeking a Cyber Incident Response Analyst to join the IRT for the AF DCGS program at Langley AFB, VA. The role focuses on leading IR investigations, log analysis with ELK, and developing SOPs to protect the OA DCGS weapon system.

The ideal candidate has TS/SCI clearance, a IT/CS degree with 5+ years experience, and expertise in IR lifecycle, SIEMs, and cloud/security tools. Travel is local with up to 10% involvement and a 24/7 shift schedule is required.

Qualifications

Active TS/SCI clearance required.
Bachelor's degree in IT/CS or related field with 5+ years of experience, degree may be substituted.
DOD 8140 (8570) IAT Level II (Security+ or equivalent).
In-depth understanding of the Incident Response lifecycle.
Familiarity with cyber security tools and procedures.
Willing to work in a shift-based environment, including weekends/holidays.

Responsibilities

Lead and assist in incident response investigations through all phases (detection, containment, eradication, recovery, lessons learned).
Utilize ELK/Elastic Stack to perform log analysis, threat detection, and investigations; create security incident reports and dashboards.
Escalate and document internal/external security incidents through ticketing and reporting processes.
Design, implement, and maintain cybersecurity SOPs and IR playbooks.
Maintain documentation of IR processes and case notes; ensure testing/evaluations are documented.
Support proactive threat hunting and vulnerability assessments.
Analyze and correlate logs from varied data sources to identify patterns and anomalies.
Apply knowledge of CVEs to incident handling and remediation.