DoD Security Operations Analyst — Elastic SIEM Specialist

CACI; United States; On-site; USD 75,000 - 158,000; Full time

Job summary

CACI is seeking a Security Operations Analyst to protect critical DoD systems. You will monitor, detect, and respond to security events across endpoints, networks, cloud, and access security using Elastic Security, Tenable, and Zscaler.

In this full-time role with up to 10% travel to Scott Air Force Base, you’ll join a team focused on threat monitoring, incident response, and continuous improvement of security posture.

Qualifications

• Active clearance: Secret or Top Secret.
• 3–5 years in a security operations or SOC.
• Hands-on experience with a SIEM platform (Elastic Security preferred).
• Working knowledge of vulnerability scanning tools (Tenable SC preferred).
• Familiarity with network security monitoring and firewall technologies.
• DoD 8140.03M DCWF Basic Tier Certification — CC, GDSA, or GISF.

Responsibilities

• Monitor and analyze security events and alerts using Elastic Security SIEM.
• Conduct vulnerability scans with Tenable SC and assess cloud workloads via Tenable Cloud Security.
• Manage endpoint security policies using Trellix ePO or Microsoft Defender for Endpoint (MDE).
• Monitor network security activity across Palo Alto Next-Generation Firewalls.
• Analyze secure access traffic through Zscaler Private Access and Internet Access.
• Detect, document, and escalate security incidents following established response procedures.
• Develop continuous monitoring reports and contribute to security posture dashboards.
• Track and present security KPIs to program leadership.

Skills

Secret/Top Secret clearance

SOC experience

Elastic Security SIEM

Vulnerability scanning

Network security monitoring

Firewall technologies

DoD 8140 DCWF Basic Tier cert

Education

Bachelor's degree (preferred)

Tools

Elastic Security

Tenable SC

Tenable Cloud Security

Trellix ePO

Microsoft Defender for Endpoint

Palo Alto NGFW

Zscaler Private Access

Zscaler Internet Access

Job description

CACI is seeking a Security Operations Analyst to protect critical DoD systems. You will monitor, detect, and respond to security events across endpoints, networks, cloud, and access security using Elastic Security, Tenable, and Zscaler.

In this full-time role with up to 10% travel to Scott Air Force Base, you’ll join a team focused on threat monitoring, incident response, and continuous improvement of security posture.