Senior Cyber Analytics Engineer – Threat Detection

CACI International Inc; St. Louis (MO); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International Inc. seeks an Advanced Cybersecurity Analytics Engineer III to strengthen defensive countermeasures across enterprise networks. You will analyze data, develop rules, and coordinate with Defense teams to prevent and eradicate intrusions.

Strong SIEM tuning, scripting in Python/Bash/PowerShell, and DoD 8140.01/8570.01-M certifications are required. This role demands TS/SCI clearance and collaboration across focused operations to protect critical missions.

Qualifications

• US citizenship with TS/SCI clearance.
• 8+ years of advanced cybersecurity analytics experience.
• DoD 8140.01 / DoD 8570.01-M IAT Level III & CSSP Analyst cert.
• Experience with data mining or building queries in a SIEM.
• Strong signature development and tuning.
• Strong understanding of network protocols and protocol analyzers.
• Knowledge of static file signatures and how they apply to countermeasures.
• Good working knowledge of regular expressions.

Responsibilities

• Analyze trends and patterns of data on NGA networks to identify and predict incidents and develop or tune rules/signatures/scripts.
• Coordinate with Defensive Cyber Operations and Focused Operations to develop or tune rules/signatures/scripts.
• Coordinate with other Cybersecurity Operations Services to investigate potential sources of compromise and develop or tune rules/signatures/scripts.
• Correlate and analyze precursors to incidents and develop or tune rules/signatures/scripts.
• Collaborate with the Cyber Data Analytics team to improve SIEM alert efficiency through evaluation of valid alerts and false positives.
• Work with the Cyber Incident Response Team to assess ongoing incident activity and aid triage.
• Document all work in the ticketing system with detail for reconstruction by stakeholders.
• Provide input to recurring meetings and briefings.

Skills

Data mining

SIEM querying

Signature development

Network protocol analysis

Regular expressions

Python scripting

Bash scripting

PowerShell scripting

Hex editor

Education

DoD 8140.01 IAT Level III & CSSP Analyst cert

Tools

Python

Bash

PowerShell

SIEM

Job description

CACI International Inc. seeks an Advanced Cybersecurity Analytics Engineer III to strengthen defensive countermeasures across enterprise networks. You will analyze data, develop rules, and coordinate with Defense teams to prevent and eradicate intrusions.

Strong SIEM tuning, scripting in Python/Bash/PowerShell, and DoD 8140.01/8570.01-M certifications are required. This role demands TS/SCI clearance and collaboration across focused operations to protect critical missions.