Cyber Incident Response Analyst — 24/7 Operations (TS/SCI)

CACI International Inc; Hampton (VA); On-site; USD 75,000 - 158,000; Full time

Job summary

CIACI International Inc. is seeking a motivated Cyber Incident Response Analyst to join the Cyber Security Incident Response Team supporting the AF DCGS program at Langley AFB, VA.

The role emphasizes Windows/Linux/Cloud environments, SIEM tools, and an IR process to deliver clear, actionable findings with minimal supervision. The successful candidate will lead investigations across all incident stages, produce reports, and help develop SOPs to strengthen defenses.

Qualifications

• Active TS/SCI clearance.
• Bachelor’s degree in IT/CS or related field with 5+ years experience.

Responsibilities

• Lead and assist incident response investigations through all phases (detection, containment, eradication, recovery, lessons learned).
• Utilize ELK/Elastic Stack for log analysis, threat detection, and investigations; create security incident reports and dashboards.
• Design, implement, and maintain cybersecurity SOPs and incident response playbooks.
• Collaborate with cross-functional teams and stakeholders; provide actionable reporting.

Skills

TS/SCI clearance

Incident Response lifecycle

SIEM experience

Analytical skills

Documentation and reporting

Education

Bachelor’s degree in IT/CS or related field

Tools

Elastic Stack

AWS

Tanium

Trellix

ACAS

Job description

CIACI International Inc. is seeking a motivated Cyber Incident Response Analyst to join the Cyber Security Incident Response Team supporting the AF DCGS program at Langley AFB, VA.

The role emphasizes Windows/Linux/Cloud environments, SIEM tools, and an IR process to deliver clear, actionable findings with minimal supervision. The successful candidate will lead investigations across all incident stages, produce reports, and help develop SOPs to strengthen defenses.