Cyber Security Analyst Senior - Incident Response

$105,100 - $231,100/Yr

CACI International - Denver, CO

Full-time - Mid Level

Denver, CO

Professional, Scientific, and Technical Services

About the position

CACI is seeking a motivated, career and customer-oriented Cyber Security Analyst, Incident Response, to join our team in the Springfield, VA, area. This position requires a Top Secret/SCI clearance with a polygraph and is focused on providing leadership and high-level CSOC Security Support by managing cyber and network sensor activity. The Cyber Security Analyst will perform security event and incident correlation using information gathered from various sources within the enterprise. This role involves cyber incident triage, which includes determining the scope, urgency, and potential impact of incidents, identifying specific vulnerabilities, and making recommendations for expeditious remediation. The analyst will track cyber actions from initial detection through final resolution, analyze and assess damage to data and infrastructure, and perform cyber engineering trend analysis and reporting. The position requires working in a 24x7 shift environment, following a Panama Shift Schedule, with hours dependent on location.

Responsibilities

• Provides leadership and high level CSOC Security Support managing cyber and network sensor activity
• Performs security event and incident correlation using information gathered from a variety of sources within the enterprise
• Performs cyber incident triage to include determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations which enable expeditious remediation
• Tracks cyber actions from initial detection through final resolution
• Analyzes and assesses damage to the data / infrastructure
• Performs cyber engineering trend analysis and reporting

Requirements

• Minimum Education: B.S. or equivalent experience in related field
• Minimum 5 years of relevant experience
• CNDSP-IR (GCIH, CSIH, or CEH) certification required
• IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required
• Proficient in Windows and Linux operating systems
• Working knowledge of current COTS Cybersecurity technologies
• Working knowledge of database and operating system security
• Understanding of latest security principles, techniques, and protocols
• Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously; coordinating resources and ensuring scheduled goals are met
• Excellent verbal and written communication skills are required
• Ability to effectively interact with various levels of senior management is necessary
• Ability to make decisions and resolve problems effectively - seek out information and data to evaluate, prioritize and formulate best solution or practice
• Must be able to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities

Nice-to-haves

• Experience working within a Cybersecurity Operations Center environment desired
• Experience with COTS technologies used in a Cybersecurity Engineering environment desired

Benefits

• Competitive benefits and learning and development opportunities
• Flexible time off benefit
• Comprehensive benefits such as healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits