Cyber Security Operations Specialist - CSOC (Tiers 1, 2, 3) with

CACI; Springfield (VA); On-site; USD 68,000 - 144,000; Full time

Job summary

An established industry player is seeking passionate Cyber Security Operations Specialists to join their CSOC Tiered Services team. This role offers the chance to work with cutting-edge technologies and contribute to critical missions. You will be responsible for providing 24/7 coordination and execution of actions for incident containment and recovery. Ideal candidates will have a strong background in cybersecurity, hold relevant DoD certifications, and possess a BA/BS degree along with several years of experience. Join a culture of integrity and trust, where your contributions will be valued and your career can flourish.

Qualifications

• TS/SCI clearance required; must pass Government Polygraph post-hire.
• 2-6 years of relevant work experience or additional experience in lieu of degree.

Responsibilities

• Provide CSOC Tiered Services for incident containment and recovery.
• Conduct malware analysis and forensic artifact handling.

Skills

TCP/IP

Protocol analyzers

Network protocols

Cyber Attack Lifecycle

Mitre Attack framework

Obfuscation techniques

Utilizing SIEM for event analysis

Education

BA/BS Degree

Job description

Cyber Security Operations Specialist - CSOC (Tiers 1, 2, 3)

Employer: CACI

Location: Springfield

Salary: $68,400.00 - $143,700.00 USD Annual

Closing date: 15 Apr 2025

Sector: IT

Job Role: Cyber Security Consultant

Job Type: Permanent

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

Are you passionate about working with leading–edge technologies, on high–performing teams, and have a desire to learn valuable skills and experiences that will propel your career? CACI's Transport & Cybersecurity Services (TCS) program is actively hiring TS/SCI cleared Cyber Security Operations Specialists to join our CSOC Tiered Services team! We are seeking mission–focused individuals to provide various levels of CSOC services (Tier 1, Tier 2, and Tier 3). These positions can be based out of either Springfield, VA (or) St. Louis, MO.

What You'll Get to Do:

1. Our team of Cyber Security Operations Specialists provides CSOC Tiered Services, which include 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents.

More About the Roles:

1. CSOC Tier 1 Services: Include recording, investigating, and processing events received via walk–ups, phone calls, email, chat, web, cybersecurity tools, and enterprise tools. DoD 8570 IAT Level II required (current); must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date.
2. CSOC Tier 2 Services: Include malware and implant analysis, and forensic artifact handling and analysis. While not in a period of incident response, you will conduct continuous exercises and dry runs to improve response outcomes in the event of a cyber incident. DoD 8570 IAT Level II required (current); must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date.
3. CSOC Tier 3 Services: Include incident handling/incident response, malware analysis and signature development, and forensic artifact handling and analysis. DoD 8570 IAT Level III required (current); must be able to successfully obtain/maintain CSSP Incident Responder certification within 120 days of start date.

You'll Bring These Qualifications:

1. In addition to the Government customer's DoD 8570 certification requirements for each role, qualified candidates will bring:
2. TS/SCI (current); with the ability to successfully pass/maintain a Government Polygraph (post–hire).
3. BA/BS Degree and typically between Two (2) to Six (6) years of relative work experience. Additional experience may be considered instead of a degree.
4. Ability to work One (1) or more of Five (5) work shifts.
5. TCP/IP; Protocol analyzers; Network protocols; Cyber Attack Lifecycle; Mitre Attack framework; Obfuscation techniques (i.e. base64; rot13; XOR; URL encoding; etc.); Utilizing SIEM for event analysis.

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

What You Can Expect:

1. A culture of integrity. At CACI, we place character and innovation at the center of everything we do.
2. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers.
3. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground – in your career and in our legacy.

Pay Range: The proposed salary range for this position is: $68,400–$143,700

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.