Cyber Threat Hunter & Forensics Analyst

CACI International Inc; Chantilly (VA); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International Inc. is seeking a Cyber Threat Analyst in Chantilly, VA to defend networks through threat hunting and tactical analysis.

The role requires handling diverse data sources, scripting, and understanding intrusions while producing actionable intelligence for varied audiences. The candidate should have a TS/SCI clearance, a Bachelor's degree, and experience in digital forensics, networking, and log analysis.

Qualifications

• Active TS/SCI with required polygraph clearance.
• A completed Bachelor’s degree.
• Experience in technical analysis, digital forensics, technical targeting, or similar relevant technical experience.
• Fundamental understanding of networking, with basic knowledge of Linux and Windows operating systems.
• Comfortable with Windows and Linux command line tools (PowerShell).
• Proficient in data exploitation and data analysis.
• Proficient in analyzing log files from web hosting services and other technical infrastructure.
• Proficient in analyzing and exploiting RAW PCAP collections.
• Ability to articulate technical information to non-technical audiences.

Responsibilities

• Use data exploitation and visualization tools for analysis, preferably broad in scope.
• Analyze data sets for trends and patterns.
• Produce informational, contextual, and/or intelligence products for a variety of audiences.
• Script and/or programming experience (e.g. Python, Bash, R, Spark, C#, Java).
• Work with intrusion sets TTPs and apply knowledge to future analysis.
• Work with social media platforms.

Skills

Python

Bash

R

Spark

PowerShell

Data analysis

Threat hunting

Digital forensics

Networking basics

Education

Bachelor's degree

Tools

PowerShell

Job description

CACI International Inc. is seeking a Cyber Threat Analyst in Chantilly, VA to defend networks through threat hunting and tactical analysis.

The role requires handling diverse data sources, scripting, and understanding intrusions while producing actionable intelligence for varied audiences. The candidate should have a TS/SCI clearance, a Bachelor's degree, and experience in digital forensics, networking, and log analysis.