Cyber Protection Team Analyst

Caci Inc
Washington, United States of America
1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Intermediate
Compensation
$ 218K

Job location

Washington, United States of America

Tech stack

Microsoft Windows
Data analysis
Software System Penetration Testing
Computer Security
Information Systems
Linux
Monitoring of Systems
Intrusion Detection and Prevention
Intrusion Detection Systems
Linux System Administration
Network Forensics
Program Analysis
Security Information and Event Management
Scripting (Bash/Python/Go/Ruby)
Cybercrime
Windows Security
Data Management
Cyber Warfare
Vulnerability Analysis

Job description

  • Actively review all data feeds, analytical systems, sensor platforms, and output from other tool products.
  • Provide written or oral reports of findings to designated leadership for further investigation or for action.
  • Participate in a variety of Information System Security (ISS) activities, including: monitoring of systems status; escalating and reporting potential incidents; creating and updating incident cases and tickets; risk assessment analysis for High Assurance Gateway (HAG) access and Web Access Requests (WARs); analyzing ISS reports; applying various antivirus, intrusion detection, DMA, and vulnerability assessment tools, techniques and procedures; authoring and implementing custom detection content; tuning the SIEM and IDS/IPS events to minimize false positives; authoring and maintaining custom SIEM content; program analysis and review; hardware and software evaluation and analysis; process improvement; data management; and coordination and reporting of ISS-related incidents.
  • Investigate and positively identify anomalous events that are detected by security devices or reported from external entities, USCG components, system administrators, and the user community, via security monitoring platform and tools, incoming phone calls, and emails.
  • Provide informal investigation, review, and recommendation documentation, as necessary.
  • Contribute to deliverables and reports., The CPT Analyst Role will be chosen between one of the following roles: Master Host Analyst (Microsoft Windows), Master Host Analyst (Linux), and Master Network Analyst.

Requirements

Required:

  • Active Top Secret with SCI eligibility.
  • Relevant Years of Experience: 10+ years of experience in any combination of cyber technology, cybersecurity, offensive cyber operations, penetration testing, coding/scripting, vulnerability assessments, network/system administration, or related fields.
  • Education: BA/BS or equivalent years of relevant experience.
  • Certifications: IAT III & CSSP.
  • Extensive Cyber Threat/Protection Analysis experience, including experience conducting or supporting Cyber Mission Forces exercises.
  • Expert understanding of cyber threats, information security, and monitoring and detection., * Minimum 48 months experience conducting or supporting Cyber Mission Forces exercises.
  • Advanced Security Onion Course Certification.
  • Advanced Network Forensic and Analysis Certification.
  • SIEM with Tactical Analytics (SEC555) completion.
  • GIAC Certifications: GCIA, GNFA.
  • Offensive Security Certified Practitioner (OSCP).
  • Offensive Security Certified Expert (OSCE).

CPT Master Host Analyst (Microsoft Windows):

In addition to CPT Support Services requirements listed above, the CPT Master Host Analyst (Microsoft Windows) must have:

  • Windows System Analyst Senior Level Certified.
  • Minimum 60 months as certified Senior Level Analyst.
  • Microsoft 365 Certified: Modern Desktop Administrator Associate.
  • GIAC Windows Security Administrator.
  • SIEM with Tactical Analytics (SEC555) completion.
  • Offensive Security Certified Practitioner (OSCP).
  • Offensive Security Certified Practitioner (OSCE)., * Unix/Linux System Administrator Senior Level Certified.
  • Minimum 60 months as certified Senior Level Analyst.
  • Enterprise Diagnostic and Troubleshooting Training.
  • Enterprise Linux System Administration.
  • Active Defense Offensive Countermeasures and Cyber Deception (SEC550).
  • SIEM with Tactical Analytics (SEC555).
  • Offensive Security Certified Practitioner (OSCP).
  • Offensive Security Certified Expert (OSCE).

Benefits & conditions

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is: $103,800 - $218,100

About the company

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Apply for this position