Cybersecurity Incident Responder

$94,400 - $198,300/Yr

CACI International - Washington, DC

Full-time - Mid Level

Washington, DC

1,001-5,000 employees

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Incident Responder role at CACI involves safeguarding and securing cyberspace by responding to cybersecurity incidents, particularly within the U.S. Federal Information Technology networks. The position requires hands-on involvement in incident recovery, coordination with various stakeholders, and the use of specialized tools for vulnerability assessment and malware analysis. The role is critical in enhancing the security posture of government networks against evolving cyber threats.

Responsibilities

• Work with the USCG Cyber Command and external vendors to recover from incidents.
• Gather artifacts and recover systems during incidents.
• Deploy within 72 hours for incident response when necessary.
• Support incident response via phone, email, or remote access when deployment is not possible.
• Coordinate with external service providers, system owners, and Information System Security Officers (ISSOs).
• Maintain portable vulnerability assessment and malware analysis tools for incident response.
• Contribute to Incident Assessment and Response Report deliverables.

Requirements

• 7+ years of relevant experience in cybersecurity.
• Bachelor's degree or equivalent experience.
• IAT Level III certification, CND, and CSSP-IR qualifications.
• Subject matter expertise in Cyber Threat Hunting, Malware Analysis, Cyber Threat Intelligence, or Digital Forensics.
• Experience in a Cyber Security Operations Center.
• Familiarity with SIEM platforms.
• Experience with scripting languages like Python or PowerShell for automation.

Nice-to-haves

• Knowledge of cybersecurity concepts, network protocols, and firewalls.
• Experience with email security and endpoint security.
• Familiarity with cloud security fundamentals.
• Knowledge of incident response methodologies and NCCIC National Cyber Incident Scoring System.

Benefits

• Health insurance
• Flexible time off
• Learning and development opportunities
• Competitive compensation
• Comprehensive benefits including healthcare, wellness, financial, retirement, and family support.