Senior Cyber Defense Analytics Engineer

CACI; United States; On-site; USD 75,000 - 158,000; Full time

Job summary

CACI seeks experienced cybersecurity analytics professionals for defensive operations. You will develop and maintain countermeasures, tune SIEM rules, and collaborate across teams to prevent compromises and eradicate adversaries. Requires TS/SCI, DoD 8140/8570 IAT III, and 8+ years in analytics.

The role emphasizes proactive detection, purple-teaming, and ongoing validation of defenses within a fusion-focused operation. Competitive compensation and benefits accompany mission-driven work.

Qualifications

• US citizen with an active TS/SCI clearance required.
• 8+ years of advanced cyber security analytics experience.
• Certification compliant with DoD 8140.01 and DoD 8570.01-M IAT Level III and CSSP Analyst.
• Experience with data mining or building queries in a SIEM.
• Strong understanding of signature development and tuning.
• Strong understanding of network protocols and analysis with protocol analyzers.
• Knowledge of static file signatures and how they apply to countermeasures.
• Good working knowledge of regular expressions.

Responsibilities

• Analyze trends in NGA network data to identify incidents and develop/tune rules, signatures, or scripts.
• Coordinate with Defensive Cyber Operations to tune rules/signatures/scripts.
• Investigate sources of compromise and develop rules/signatures/scripts as needed.
• Correlate precursors to incidents and enhance detection capabilities.
• Collaborate with Cyber Data Analytics to improve SIEM alert accuracy.
• Support Cyber Incident Response by assessing ongoing activity to aid triage.
• Document work in the ticketing system with detailed reconstruction data.
• Provide input to recurring meetings and briefings.

Skills

Clearance TS/SCI

8+ years cyber analytics

DoD 8140/8570 IAT III CSSP Analyst

Data mining/SIEM queries

Signature development and tuning

Network protocols analysis

Regex proficiency

US citizen

Tools

SIEM tooling

Hex editor

Python

Job description

CACI seeks experienced cybersecurity analytics professionals for defensive operations. You will develop and maintain countermeasures, tune SIEM rules, and collaborate across teams to prevent compromises and eradicate adversaries. Requires TS/SCI, DoD 8140/8570 IAT III, and 8+ years in analytics.

The role emphasizes proactive detection, purple-teaming, and ongoing validation of defenses within a fusion-focused operation. Competitive compensation and benefits accompany mission-driven work.