Cyber Security Operations Specialist - CSOC (Tiers 1, 2, 3)

CACI International•St. Louis, MO

About The Position

Are you passionate about working with leading-edge technologies, on high-performing teams, and have a desire to learn valuable skills and experiences that will propel your career? CACI's Transport & Cybersecurity Services (TCS) program is actively hiring TS/SCI cleared Cyber Security Operations Specialists to join our CSOC Tiered Services team! We are seeking mission-focused individuals to provide various levels of CSOC services (Tier 1, Tier 2, and Tier 3). These positions can be based out of either Springfield, VA (or) St. Louis, MO. TCS offers a long-term, CACI prime contract opportunity supporting the National Geospatial-Intelligence Agency’s (NGA) GEOINT mission. Our team of talented Network and Cybersecurity professionals help design, develop, procure, implement, operate/sustain, and enhance NGA networks and cybersecurity posture in support of national security. For additional information and a list of current openings, please visit our TCS Jobs page: https://careers.caci.com/global/en/tcs-jobs Our team of Cyber Security Operations Specialists provides CSOC Tiered Services, which include 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents. CSOC Tier 1 Services include recording, investigating, and processing events received via walk-ups, phone calls, email, chat, web, cybersecurity tools, and enterprise tools. DoD 8570 IAT Level II required (current); must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date. CSOC Tier 2 Services include malware and implant analysis, and forensic artifact handling and analysis. While not in a period of incident response, you will conduct continuous exercises and dry runs to improve response outcomes in the event of a cyber incident. DoD 8570 IAT Level II required (current); must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date. CSOC Tier 3 Services include incident handling/incident response, malware and analysis and signature development, and forensic artifact handling and analysis. DoD 8570 IAT Level III required (current); must be able to successfully obtain/maintain CSSP Incident Responder certification within 120 days of start date. This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy. Your potential is limitless. So is ours.

Requirements

TS/SCI (current); with the ability to successfully pass/maintain a Government Polygraph (post-hire)
BA/BS Degree and typically between Two (2) to Six (6) years of relative work experience. Additional experience may be considered instead of a degree.
Ability to work One (1) or more of Five (5) work shifts
TCP/IP
Protocol analyzers
Network protocols
Cyber Attack Lifecycle
Mitre Attack framework
Obfuscation techniques (i.e. base64; rot13; XOR; URL encoding; etc.)
Utilizing SIEM for event analysis
DoD 8570 IAT Level II required (current); must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date (Tier 1 & 2)
DoD 8570 IAT Level III required (current); must be able to successfully obtain/maintain CSSP Incident Responder certification within 120 days of start date (Tier 3)

Responsibilities

24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents.
CSOC Tier 1 Services include recording, investigating, and processing events received via walk-ups, phone calls, email, chat, web, cybersecurity tools, and enterprise tools.
CSOC Tier 2 Services include malware and implant analysis, and forensic artifact handling and analysis. While not in a period of incident response, you will conduct continuous exercises and dry runs to improve response outcomes in the event of a cyber incident.
CSOC Tier 3 Services include incident handling/incident response, malware and analysis and signature development, and forensic artifact handling and analysis.