Cyber Defense Analyst
Suitland, MD - USA
Job Summary
The Opportunity:
CACI is seeking a skilled and experienced Cyber Defense Analyst (Level 2) to join our dynamic team to support a DoD client in Suitland MD. The ideal candidate will possess a robust background in Computer Network Defense (CND) with a proven track record in monitoring investigating and responding to cybersecurity threats. This role requires a proactive individual with strong analytical skills excellent communication abilities and a comprehensive understanding of IT systems and networks.
Responsibilities:
- Monitor and investigate alerts from cybersecurity tools to identify potential threats and malicious activities.
- Utilize Network Intrusion Detection/Prevention Systems (NIDPS) and Security Information and Event Management (SIEM) systems to analyze network traffic and detect anomalies.
- Develop and implement computer network defense tactics techniques and procedures (TTPs).
- Create and maintain best practices manuals and standard operating procedures in alignment with Federal DoD IC and industry standards.
- Participate in incident management lifecycle processes including identification categorization eradication response recovery and mitigation of cybersecurity incidents and breaches.
- Conduct penetration testing and Red Teaming activities to assess and enhance the security posture of the organization.
- Perform malware detection and analysis IDS/IPS rule/signature writing and countermeasure development.
- Utilize scripting and coding languages to automate tasks and enhance security measures.
- Collaborate with cross-functional teams to ensure the integrity and security of IT systems and networks.
- Provide briefings write reports and disseminate intelligence related to cybersecurity threats and incidents.
Qualifications:
Required:
- BA/BS in Computer Science Information Technology Information Assurance or a related field is desired.
- TS/SCI Clearance
- Alternatively 8 years of relevant professional experience in CND or related fields.
- Must have 5 years of concentrated experience in CND.
- 3 years of professional experience in monitoring and investigating alerts from cybersecurity tools.
- Skills and Abilities:
- Effective interpersonal organizational time management writing/documentation and briefing skills with strong attention to detail.
- Strong analytical conceptual and problem-solving skills.
- Proven ability to communicate effectively and develop/present presentations.
- Ability to think outside the box by utilizing IT knowledge and cybersecurity tool output to discover instances of malicious activity.
- Proven ability to prioritize execute and complete tasks with little to no direction in a high-pressure environment.
- Moderate experience utilizing Federal DoD IC and industry standards.
- Moderate experience in the development and implementation of CND TTPs.
- Moderate experience in the operational use of NIDPS (e.g. Cisco FirePower Palo Alto NGFW) and host-based intrusion detection/prevention systems (e.g. Trellix ePO Microsoft Defender Tanium).
- Moderate experience in the operational use of SIEM systems (e.g. Splunk Elastic).
- Moderate knowledge of policies and processes related to CND execution.
- Moderate knowledge of incident management lifecycle processes.
- Moderate knowledge of network security architecture concepts including topology protocols and components.
- Knowledge of common adversary TTPs in assigned areas of responsibility.
- Moderate knowledge of common enterprise services such as domain controllers print email DNS and web servers.
- Knowledge of network traffic packet captures with capabilities such as WireShark or NIKSUN.
- Moderate knowledge in identifying and classifying attack vectors malware detection and analysis IDS/IPS rule/signature writing and countermeasure development.
- Moderate knowledge of firewall rules and routing rules.
- Moderate knowledge of scripting and coding languages (e.g. Python Perl Ruby JavaScript
What You Can Expect:
A culture of integrity.
At CACI we place character and innovation at the center of everything we do. As a valued team member youll be part of a high-performing group dedicated to our customers missions and driven by a higher purpose to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. Youll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together we will advance our nations most critical missions build on our lengthy track record of business success and find opportunities to break new ground in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including but not limited to geographic location Federal Government contract labor categories and contract wage rates relevant prior work experience specific skills and competencies education and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI you will receive comprehensive benefits such as; healthcare wellness financial retirement family support continuing education and time off benefits.
The proposed salary range for this position is:
$86600 - $181800Required Experience:
IC
About Company
CACI employs a diverse range of talent to create an environment that fuels innovation and fosters continuous improvement and success. At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security miss ... View more