Cyber Threat Analyst

CACI•Chantilly, VA

5d•$113,200 - $237,800

About The Position

The Cyber Threat Analyst will work with an agile, fast-paced team defending a client’s global networks through threat hunting and tactical analysis of ongoing attacks. The role involves investigating multiple platforms to identify data anomalies and applying technical, forensic, intelligence, and vulnerability-assessment skills to support national security missions. The analyst will contribute to highly visible projects, help advance long-term strategic goals through tactical objectives, and develop clear, practical solutions to complex problems. The position is part of an expanding Cyber Operations department. The company describes opportunities to grow across programs, participate in team-building activities, and access career-development resources, including paid cyber events and training, internal research and development opportunities, and prepaid courses for nationally recognized certifications. The position is contingent on funding and may not be filled immediately; applicants may also be considered for other CACI positions. The proposed salary range is $113,200–$237,800. Final compensation may depend on factors including location, contract labor categories and wage rates, prior experience, skills, education, and certifications. CACI offers competitive compensation, benefits, and learning and development opportunities, with benefits covering healthcare, wellness, financial and retirement support, family support, continuing education, and time off.

Requirements

Active TS/SCI clearance with the required polygraph.
Completed bachelor’s degree.
Experience in technical analysis, digital forensics, technical targeting, or similar relevant technical work.
Fundamental understanding of networking and basic knowledge of Linux and Windows operating systems.
Comfort with Windows and Linux command-line tools, including PowerShell.
Proficiency in data exploitation and data analysis.
Proficiency in analyzing log files from web-hosting services and other technical infrastructure.
Proficiency in analyzing and exploiting raw PCAP collections.
Ability to explain technical information to nontechnical audiences.
Strong analytical and critical-thinking skills, including the ability to think strategically.
Ability to communicate complex ideas and insights verbally and in writing to varied audiences.
Ability to remain open-minded and change opinions based on new information and requirements.
Attention to detail and accuracy in documentation.
Knowledge of IT defensive best practices.
Demonstrated experience using visualization tools to display network graphs and workflows with COTS products or custom scripts.

Nice To Haves

Knowledge and skills in computer forensics and mobile-device forensics, data recovery, reverse engineering, intrusion analysis and methodologies, intelligence analysis, and vulnerability assessments.
Broad experience with GOTS, commercial, and/or open-source data exploitation and visualization tools.
Scripting or programming experience with Python, Bash, R, Spark, C#, or Java.

Responsibilities

Use GOTS, commercial, and/or open-source data exploitation and visualization tools for analysis.
Analyze small and large data sets for trends and patterns.
Produce informational, contextual, and/or intelligence products that explain findings for varied audiences.
Apply scripting and/or programming skills, such as Python, Bash, R, Spark, C#, or Java.
Analyze intrusion-set tactics, techniques, and procedures (TTPs) and apply that knowledge to future analysis.
Work with social media platforms.
Support threat hunting and tactical analysis of ongoing attacks against the client’s global networks.