Cyber Security Operations Specialist I - Tier 1 (TS/SCI)

Relha LLC; St. Louis, Northern (MO, KY); Hybrid; USD 53,000 - 106,000; Full time

Job summary

CAC I is seeking a Cyber Security Operations Specialist I - Tier 1 to deliver 24/7 CSOC Tier 1 services, including containment, eradication, and recovery actions across events and incidents. The role requires TS/SCI clearance and DoD-aligned certifications, with local travel up to 10%.

You will monitor, triage, and document events using a SIEM, generate tickets, coordinate with multiple NGA assets, and contribute to daily and weekly CSOC reporting.

Qualifications

• Must be a US Citizen with an Active TS/SCI to start work, but required to obtain a CI Poly within 6 months.
• Bachelors Degree and Two (2) years of job related experience in a CSOC environment.
• Post-Hire Requirement: CSSP Analyst Certification (must be obtained within 6 months of hire date)

Responsibilities

• Utilize the SEIM to perform 24/7 monitoring, detection, and initial triage of events/alerts/incidents.
• Create tickets in the agency directed ticketing system for all alerts/incidents.
• Obtain and aggregate artifacts, data, screenshots, and other products from NGA assets to complete the ticket for higher tier analysis.
• Submit tuning requests to relevant security services.
• Interact with CSOC customers to generate tickets via walk-ins, phone, web, email, or chat.
• Document steps used to analyze and triage an event/alert/incident for reconstruction by higher tiers.
• Monitor virus submission inbox and assess emails for SPAM/phishing/malware.
• Provide metrics for reports and daily CSOC activity updates.
• Provide input to CSOC reports and status updates.

Skills

CSOC operations

Incident response

SIEM

Ticketing

Triage

Education

Bachelors Degree

2 years CSOC experience

Tools

SIEM

Ticketing system

Network Security Services

Endpoint Security Services

Cybersecurity Data Analysis Services

Job description

CAC I is seeking a Cyber Security Operations Specialist I - Tier 1 to deliver 24/7 CSOC Tier 1 services, including containment, eradication, and recovery actions across events and incidents. The role requires TS/SCI clearance and DoD-aligned certifications, with local travel up to 10%.

You will monitor, triage, and document events using a SIEM, generate tickets, coordinate with multiple NGA assets, and contribute to daily and weekly CSOC reporting.