Cyber Incident Response Analyst

The Opportunity:
Our client is seeking a highly motivated Incident Response Analyst that will join the Cyber Security Incident Response Team (IRT) supporting the AF DCGS program located onsite at Langley AFB Va. The ideal candidate will have a solid understanding of Windows Linux and Cloud environments networking concepts and system administration fundamentals. They should also possess hands-on experience with SIEMs or other cyber tools utilized for detection and addition the candidate must demonstrate familiarity with the incident response (IR) process including the ability to apply established procedures during investigations escalate findings appropriately and provide clear actionable reporting to appropriate stakeholders and/or affected teams with minimal supervision.

Responsibilities:
Lead and assist in incident response investigations through all phases (detection containment eradication recovery lessons learned) to ensure the confidentiality integrity and availability of the OA DCGS weapon system.
Utilize ELK/Elastic Stack to perform log analysis threat detection and investigations; Create and maintain security incident reports and dashboards.
Escalate and document internal/external security incidents through appropriate ticketing and reporting processing
Design implement and maintain cybersecurity Standard Operating Procedures (SOPs) and incident response playbooks
Maintain documentation of Incident Response (IR) processes and case notes; Ensure security testing and evaluations are completed and properly documented.
Support proactive threat hunting and vulnerability assessments
Analyze and correlate logs from varied data sources to identify patterns and anomalies
Apply knowledge of Zero-Day vulnerabilities and Common Vulnerabilities and Exposures (CVEs) to incident handling and remediation
Collaborate with cross-functional teams and external stakeholders as needed
Provide guidance for securing information systems and support cyber vulnerability penetration assessments.

Qualifications:

Required:
Active Top Secret/SCI security clearance.
Bachelors degree in IT Technology Computer Science or related field with 5 years of experience. Degree may be substituted with equivalent experience.
DOD 8140 (8570) IAT Level II (Security or equivalent).
In-depth understanding of the Incident Response lifecycle
Familiarity with cyber security tools and procedures
Strong problem-solving and analytical skills
Knowledge of security best practices and standards including NIST ISO and SOC operations.
Effective written and verbal communication skills for documentation and collaboration
Willing and able to work in a shift-based environment including weekends and holidays as part of our 24/7 operations.

Desired:
AF DCGS experience.
Proficiency in using the Elastic Stack (Elasticsearch Logstash Kibana)
Four to seven years of intelligence network communications or Systems Administration experience across Windows and Linux platforms
Experience with AWS and/or other cloud security platforms
Background as an ISSO including STIG/SCAP and vulnerability management
Familiarity with tools such as Tanium Trellix Eracent and ACAS
Basic scripting skills (Python PowerShell Bash)
Holds industry-recognized certifications such as CySA PenTest GCIH or equivalent credentials.

What You Can Expect:

A culture of integrity.

At CACI we place character and innovation at the center of everything we do. As a valued team member youll be part of a high-performing group dedicated to our customers missions and driven by a higher purpose to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. Youll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together we will advance our nations most critical missions build on our lengthy track record of business success and find opportunities to break new ground in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including but not limited to geographic location Federal Government contract labor categories and contract wage rates relevant prior work experience specific skills and competencies education and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI you will receive comprehensive benefits such as; healthcare wellness financial retirement family support continuing education and time off benefits.

The proposed salary range for this position is: