Cyber Security Operations Specialist I — CSOC Tier 1 (TS/SCI)

CACI International Inc; St. Louis (MO); On-site; USD 53,000 - 106,000; Full time

Job summary

CACI International Inc. seeks a Cyber Security Operations Specialist I - Tier 1 to deliver 24x7x365 CSOC Tier 1 services, containment, eradication, and recovery for incidents.

You will monitor via SIEM, triage events, and generate tickets for escalation, supporting NGA assets as needed. The role requires US Citizenship with TS/SCI, CI Poly within 6 months, DoD 8570-M IAT II, and CSSP Analyst certification within 6 months of hire.

Qualifications

• Must be a US Citizen with an Active TS/SCI to start work, but required to obtain a CI Poly within 6 months.
• Bachelor's Degree and Two (2) years of job related experience in a CSOC environment. Additional experience may be considered in lieu of a degree.
• DoD 8570.01-M IAT Level II
• Post-Hire Requirement: CSSP Analyst Certification (must be obtained within 6 months of hire date)

Responsibilities

• Utilize the SEIM to perform 24/7 monitoring, detection, and initial triage (identify, investigate, categorize, prioritize, ticketing, and forwarding) of events/alerts/incidents. The SIEM processes approximately 100,000 Correlated Events Per Second;
• Create tickets in the agency directed ticketing system for all alerts/incidents;
• Obtain and aggregate all artifacts, data, screen shots, and other products from assets within Network Security Services, Endpoint Security Services, Cybersecurity Data Analysis Services, and other NGA assets as needed to complete the ticket for higher tier analysis;
• Submit tuning requests as needed to Network Security Services, Endpoint Security Services, and Cybersecurity Data Analysis Services;
• Interact with and generate tickets on behalf of CSOC customers through multiple means of communication, to include but not limited to walk-ins, phones, web, email, and text-based chat systems;
• Document the steps used to analyze and triage an event/alert/incident with sufficient detail to enable the government and other contract services to systematically reconstruct after tier 1 analysis;
• Monitor the CSOC virus submit mailbox and perform initial assessment of emails to determine if they are SPAM, phishing emails, or malware;
• Provide custom metrics to support regular and ad hoc reporting requirements (e.g., incident category types, tools used, number of indicators, time opened at each step, trending statistics, service availability, system utilization, etc.);
• Provide input to the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the Weekly CSOC Status Report

Skills

CSOC Operations

SIEM Awareness

Ticketing

US Citizenship

Education

Bachelor's Degree

Tools

SIEM

Ticketing System

DoD tools

Job description

CACI International Inc. seeks a Cyber Security Operations Specialist I - Tier 1 to deliver 24x7x365 CSOC Tier 1 services, containment, eradication, and recovery for incidents.

You will monitor via SIEM, triage events, and generate tickets for escalation, supporting NGA assets as needed. The role requires US Citizenship with TS/SCI, CI Poly within 6 months, DoD 8570-M IAT II, and CSSP Analyst certification within 6 months of hire.