Senior Cyber Analytics Lead | TS/SCI | Flexible PTO

VulnU; St. Louis (MO); On-site; USD 90,000 - 190,000; Full time

Benefits offered by this job

Flexible PTO

Learning budget

Retirement match

Job summary

CACI is seeking an Advanced Cyber Analytics Lead in St. Louis, MO to develop and maintain enterprise defense countermeasures. You will collaborate across Focused Operations, applying intelligence reviews, incident data, and purple-teaming to prevent compromises and eradicate adversaries.

Leading the analytics team, you will train junior members, coordinate with multiple cybersecurity teams, and contribute to SIEM optimization while documenting activities for stakeholders.

Qualifications

• Must be a US Citizen with an Active TS/SCI.
• Bachelor's degree in Engineering, Computer Science or related field.
• Certification compliant with DoD 8140.01 and DoD 8570.01-M IAT Level III and CSSP Analyst.
• Experience with data mining or building queries in a SIEM.
• Strong understanding of signature development and tuning.
• Strong understanding of network protocols and analysis with protocol analyzers.
• Knowledge of static file signatures (magic numbers) for countermeasures.
• Good working knowledge of regular expressions.

Responsibilities

• Lead the Advanced Cyber Analytics Team in developing and maintaining countermeasures.
• Analyze trends and patterns to identify events and incidents and tune rules/signatures/scripts.
• Coordinate with Defensive Cyber Operations and Focused Operations to refine indicators.
• Collaborate with Cyber Data Analytics to improve SIEM alert efficiency.
• Work with Incident Response to predict adversary actions and assist triage.
• Document all work in the ticketing system with detailed reconstructions.

Skills

SIEM queries

Regular expressions

Python

PowerShell

Network protocols

Signature tuning

Education

Bachelor's degree in Engineering, Computer Science or related field

Tools

SIEM software

Hex editor

Job description

CACI is seeking an Advanced Cyber Analytics Lead in St. Louis, MO to develop and maintain enterprise defense countermeasures. You will collaborate across Focused Operations, applying intelligence reviews, incident data, and purple-teaming to prevent compromises and eradicate adversaries.

Leading the analytics team, you will train junior members, coordinate with multiple cybersecurity teams, and contribute to SIEM optimization while documenting activities for stakeholders.