Cyber Security Operations Specialist - CSOC (Tiers 1, 2, 3)

CACI•Springfield, VA

1d•Hybrid

About The Position

CACI's Transport & Cybersecurity Services (TCS) program is actively hiring TS/SCI cleared Cyber Security Operations Specialists to join our CSOC Tiered Services team. We are seeking mission-focused individuals to provide various levels of CSOC services (Tier 1, Tier 2, and Tier 3). These positions can be based out of either Springfield, VA (or) St. Louis, MO. TCS offers a long-term, CACI prime contract opportunity supporting the National Geospatial-Intelligence Agency’s (NGA) GEOINT mission. Our team of talented Network and Cybersecurity professionals help design, develop, procure, implement, operate/sustain, and enhance NGA networks and cybersecurity posture in support of national security.

Requirements

TS/SCI (current); with the ability to successfully pass/maintain a Government Polygraph (post-hire)
BA/BS Degree and typically between Two (2) to Six (6) years of relative work experience. Additional experience may be considered instead of a degree.
Ability to work One (1) or more of Five (5) work shifts
TCP/IP
Protocol analyzers
Network protocols
Cyber Attack Lifecycle
Mitre Attack framework
Obfuscation techniques (i.e. base64; rot13; XOR; URL encoding; etc.)
Utilizing SIEM for event analysis
DoD 8570 IAT Level II required (current) for Tier 1 and Tier 2
DoD 8570 IAT Level III required (current) for Tier 3
Must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date (Tier 1 & 2)
Must be able to successfully obtain/maintain CSSP Incident Responder certification within 120 days of start date (Tier 3)

Responsibilities

Provide 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents.
Record, investigate, and process events received via walk-ups, phone calls, email, chat, web, cybersecurity tools, and enterprise tools (CSOC Tier 1).
Conduct malware and implant analysis, and forensic artifact handling and analysis (CSOC Tier 2).
Conduct continuous exercises and dry runs to improve response outcomes in the event of a cyber incident (CSOC Tier 2).
Perform incident handling/incident response, malware analysis and signature development, and forensic artifact handling and analysis (CSOC Tier 3).