Security Operations Center (SOC) Specialist

CACI International

2d•$90,300 - $189,600•Onsite

About The Position

CACI is looking for a Security Operations Center (SOC) Specialist to support our DoD customer to implement an enterprise IT service delivery model that provides consistent, secure, high-quality, and cost-effective services to enable mission success and improve end user experience across the customer environment. On this program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DoD customer to transition focus from IT operations to mission operations. As a Security Operations Center (SOC) Specialist, you will be an integral part of the organization's cybersecurity team, responsible for monitoring, detecting, and responding to security incidents and threats. Your role will be critical in ensuring the organization's information systems and assets are protected from cyber-attacks, and that any potential security breaches are identified and mitigated promptly. Operating within a 24/7 environment, you will collaborate with other SOC members and cybersecurity professionals to maintain a strong defensive posture and ensure the confidentiality, integrity, and availability of critical data.

Requirements

Ability to maintain TS/SCI clearance
10+ years’ experience (Bachelor’s degree in relevant field may be substituted for 5 years of relevant experience).
Proven experience in a Security Operations Center (SOC) or similar role, with hands-on experience in security monitoring, incident detection, and response.
In-depth knowledge of cybersecurity principles, threat landscape, and attack vectors.
Familiarity with security tools and technologies, such as SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) systems.
Understanding of incident response procedures and methodologies, including forensic analysis.
Strong analytical and problem-solving skills, with the ability to make quick decisions under pressure.
Excellent communication skills to collaborate effectively with other team members, management, and external stakeholders.
Required DoD 8140 compliant certification such as CompTIA Security+
Willingness to work in a 24/7 rotational shift environment, including weekends and holidays.

Nice To Haves

Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus.
Knowledge of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.

Responsibilities

Monitor security events and incident logs from various sources, including network devices, servers, endpoints, and security tools.
Identify and analyze potential security incidents and anomalies, taking appropriate actions to investigate and escalate as required.
Participate in incident response activities, including containment, eradication, and recovery procedures.
Work closely with incident response teams and IT staff to mitigate the impact of security incidents and minimize the risk of recurrence.
Stay updated with the latest cybersecurity threats and attack vectors.
Analyze threat intelligence reports to proactively detect and respond to emerging threats.
Operate and maintain security tools, such as SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection/Prevention Systems), antivirus, and other security-related solutions.
Conduct in-depth analysis of security incidents, perform digital forensics, and document findings for future reference and improvement.
Prepare and submit detailed incident reports, including root cause analysis and recommended remediation actions, to senior management and stakeholders.
Implement continuous monitoring processes to ensure ongoing visibility into the security posture of the organization.
Perform regular audits of security controls and configurations.
Collaborate with the security awareness team to provide input into security training materials and awareness campaigns for employees, enhancing the overall security culture.
Ensure compliance with established security policies, standards, and procedures.
Assist in the development and maintenance of security policies as necessary.
Provide clear and concise shift handover reports to SOC colleagues, ensuring accurate communication of ongoing incidents and pertinent information.