Job Title: Cyber Protection Team Analyst
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular
Percentage of Travel Required: Up to 25%
Type of Travel: Continental US
The Opportunity:
The DHS CDM Program mission is to safeguard and secure cyberspace in an environment where the threat of cyber-attack is continuously growing and evolving. The CDM Program defends the United States (U.S.) Federal Information Technology (IT) networks from cybersecurity threats by providing continuous monitoring sensors (tools), diagnosis, mitigation tools, and associated services to strengthen the security posture of Government networks.
Hybrid!
Responsibilities:
Actively review all data feeds, analytical systems, sensor platforms, and output from other tool products.
Provide written or oral reports of findings to designated leadership for further investigation or for action.
Participate in a variety of Information System Security (ISS) activities, including: monitoring of systems status; escalating and reporting potential incidents; creating and updating incident cases and tickets; risk assessment analysis for High Assurance Gateway (HAG) access and Web Access Requests (WARs); analyzing ISS reports; applying various antivirus, intrusion detection, DMA, and vulnerability assessment tools, techniques and procedures; authoring and implementing custom detection content; tuning the SIEM and IDS/IPS events to minimize false positives; authoring and maintaining custom SIEM content; program analysis and review; hardware and software evaluation and analysis; process improvement; data management; and coordination and reporting of ISS-related incidents.
Investigate and positively identify anomalous events that are detected by security devices or reported from external entities, USCG components, system administrators, and the user community, via security monitoring platform and tools, incoming phone calls, and emails.
Provide informal investigation, review, and recommendation documentation, as necessary.
Contribute to deliverables and reports.
Qualifications:
Required:
Active Top Secret with SCI eligibility.
Relevant Years of Experience: 10+ years of experience in any combination of cyber technology, cybersecurity, offensive cyber operations, penetration testing, coding/scripting, vulnerability assessments, network/system administration, or related fields.
Education: BA/BS or equivalent years of relevant experience.
Certifications: IAT III & CSSP.
Extensive Cyber Threat/Protection Analysis experience, including experience conducting or supporting Cyber Mission Forces exercises.
Expert understanding of cyber threats, information security, and monitoring and detection.
The CPT Analyst Role will be chosen between one of the following roles: Master Host Analyst (Microsoft Windows), Master Host Analyst (Linux), and Master Network Analyst.
CPT Master Network Analyst:
In addition to CPT Support Services requirements listed above, the CPT Master Network Analyst must have:
Minimum 48 months experience conducting or supporting Cyber Mission Forces exercises.
Advanced Security Onion Course Certification.
Advanced Network Forensic and Analysis Certification.
SIEM with Tactical Analytics (SEC555) completion.
GIAC Certifications: GCIA, GNFA.
Offensive Security Certified Practitioner (OSCP).
Offensive Security Certified Expert (OSCE).
CPT Master Host Analyst (Microsoft Windows):
In addition to CPT Support Services requirements listed above, the CPT Master Host Analyst (Microsoft Windows) must have:
Windows System Analyst Senior Level Certified.
Minimum 60 months as certified Senior Level Analyst.
Microsoft 365 Certified: Modern Desktop Administrator Associate.
GIAC Windows Security Administrator.
SIEM with Tactical Analytics (SEC555) completion.
Offensive Security Certified Practitioner (OSCP).
Offensive Security Certified Practitioner (OSCE).
CPT Master Host Analyst (Linux):
In addition to CPT Support Services requirements listed above, the CPT Master Host Analyst (Linux) must have:
Unix/Linux System Administrator Senior Level Certified.
Minimum 60 months as certified Senior Level Analyst.
Enterprise Diagnostic and Troubleshooting Training.
Enterprise Linux System Administration.
Active Defense Offensive Countermeasures and Cyber Deception (SEC550).
SIEM with Tactical Analytics (SEC555).
Offensive Security Certified Practitioner (OSCP).
Offensive Security Certified Expert (OSCE).
-
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.
Pay Range :
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
The proposed salary range for this position is:
$103,800 - $218,100
CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
