Cyber Incident Response Analyst with ELK Stack Expertise

CACI International Inc.; Hampton (VA); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International Inc. is seeking a Cyber Incident Response Analyst to join the Cyber Security Incident Response Team at Langley AFB, VA. The role demands strong incident handling across detection, containment, eradication, and recovery, with hands-on ELK/Elastic Stack analysis and clear stakeholder reporting.

The ideal candidate holds a TS/SCI clearance, a relevant degree, and 5+ years in IR. Proficiency with security tools and adherence to NIST/ISO/SOC standards is essential, with a

Qualifications

• Bachelor’s degree in IT Technology, Computer Science, or related field.
• 5+ years of incident response or cybersecurity experience.
• Active TS/SCI security clearance; poly preferred.
• IAT Level II (Security+ or equivalent) required.
• Experience with ELK/Elastic Stack for log analysis.
• Familiarity with NIST, ISO, and SOC operations.
• Strong written and verbal communication skills.
• Willingness to work in a 24/7 shift-based environment.

Responsibilities

• Lead and assist incident response investigations through all phases.
• Perform log analysis and threat detection using ELK/Elastic Stack.
• Document and report internal/external security incidents clearly.
• Design, implement, and maintain IR SOPs and playbooks.
• Support threat hunting and vulnerability assessments.
• Collaborate with cross-functional teams and stakeholders.

Skills

Top Secret/SCI clearance

Bachelor's degree

IAT Level II (Security+ or equivalent)

Incident Response lifecycle

SIEMs & cyber tools

NIST/ISO/SOC standards

Strong communication skills

Shift-based 24/7 operations

Education

Bachelor's degree in IT/CS or related field

Tools

Elastic Stack

Tanium

Trellix

Eracent

ACAS

Job description

CACI International Inc. is seeking a Cyber Incident Response Analyst to join the Cyber Security Incident Response Team at Langley AFB, VA. The role demands strong incident handling across detection, containment, eradication, and recovery, with hands-on ELK/Elastic Stack analysis and clear stakeholder reporting.

The ideal candidate holds a TS/SCI clearance, a relevant degree, and 5+ years in IR. Proficiency with security tools and adherence to NIST/ISO/SOC standards is essential, with a