Cybersecurity Operations Analyst II

Full-time - Mid Level

Springfield, VA

About the position

CACI is seeking a Cybersecurity Operations Analyst to join our team supporting the National Geospatial-Intelligence Agency (NGA) through our prime Transport & Cybersecurity Services (TCS) contract. In this role, you will provide cutting-edge information technology infrastructure services that are essential for delivering timely, relevant, and effective national security missions. Our TCS contract encompasses a wide range of key services, including: innovative design and engineering, procurement and implementation, operations and sustainment, and the disposal of transport and cybersecurity IT services. These services will be deployed across multiple networks and security domains at various locations worldwide, directly supporting the NGA's vital mission. We offer flexibility in work location, with positions available in either Springfield, VA or Saint Louis, MO. Join us in this exciting opportunity to make a significant impact on national security through advanced cybersecurity and IT services.

Responsibilities

• Implement and document cybersecurity incident response activities, including containment measures and account management.
• Coordinate with security offices and law enforcement for advanced incident investigation and triage.
• Categorize incidents and ensure proper reporting, containment, and eradication across organizations.
• Create timelines, briefings, and reports to inform stakeholders of incident response actions and impacts.
• Develop and execute custom scripts and tools for data collection, analysis, and incident response.
• Perform digital media analysis, malware reverse engineering, and identify indicators of compromise.
• Serve on Cyber Incident Response Teams (C-IRT) and execute defensive measures when authorized.
• Conduct quality control reviews of incident tickets and develop comprehensive incident investigation reports.

Requirements

• Must be a U.S. Citizen with an active TS/SCI security clearance to start work.
• All candidates will be required to obtain a CI polygraph within six months of employment.
• Demonstrated experience in Cyber Security Operations Services (CSOS) is mandatory.
• Bachelor's degree (BA/BS) in Information Technology or a related field, plus a minimum of 4 years of relevant CSOS work experience OR a minimum of 8 years of progressive experience in Information Technology with a focus on CSOS.
• All Contractor personnel performing CSOC Tier 3 services must have a certification that is compliant with DoD 8140.01 and DoD 8570.01-M IAT Level II and CSSP Analyst Certification.

Nice-to-haves

• IAT Level III certification
• Active TS/SCI clearance with polygraph
• 5+ years of related CSOC tier 2 or 3 work experience

Benefits

• Healthcare
• Wellness programs
• Financial benefits
• Retirement plans
• Family support
• Continuing education
• Time off benefits