Cyber Security Operations Specialist - CSOC (Tiers 1, 2, 3)

About the position

CACI's Transport & Cybersecurity Services (TCS) program is actively hiring TS/SCI cleared Cyber Security Operations Specialists to join our CSOC Tiered Services team! We are seeking mission-focused individuals to provide various levels of CSOC services (Tier 1, Tier 2, and Tier 3). These positions can be based out of either Springfield, VA (or) St. Louis, MO. TCS offers a long-term, CACI prime contract opportunity supporting the National Geospatial-Intelligence Agency's (NGA) GEOINT mission. Our team of talented Network and Cybersecurity professionals help design, develop, procure, implement, operate/sustain, and enhance NGA networks and cybersecurity posture in support of national security.

Responsibilities

• Provide 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents.
• CSOC Tier 1: Record, investigate, and process events received via walk-ups, phone calls, email, chat, web, cybersecurity tools, and enterprise tools.
• CSOC Tier 2: Conduct malware and implant analysis, and forensic artifact handling and analysis; perform continuous exercises and dry runs to improve response outcomes.
• CSOC Tier 3: Handle incidents and responses, conduct malware analysis and signature development, and perform forensic artifact handling and analysis.

Requirements

• TS/SCI clearance (current); ability to successfully pass/maintain a Government Polygraph (post-hire).
• DoD 8570 IAT Level II required (current) for Tier 1 and Tier 2; DoD 8570 IAT Level III required (current) for Tier 3.
• Must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date for Tier 1 and Tier 2; CSSP Incident Responder certification for Tier 3.
• BA/BS Degree and typically between Two (2) to Six (6) years of relative work experience; additional experience may be considered instead of a degree.
• Ability to work one (1) or more of five (5) work shifts.
• Knowledge of TCP/IP, protocol analyzers, network protocols, Cyber Attack Lifecycle, Mitre Attack framework, obfuscation techniques, and utilizing SIEM for event analysis.

Benefits

• Healthcare benefits.
• Wellness programs.
• Financial benefits.
• Retirement plans.
• Family support programs.
• Continuing education opportunities.
• Flexible time off benefits.