Cyber Security Lead

Cyber Security LeadJob Category : SecurityTime Type : Full timeMinimum Clearance Required to Start : Top SecretEmployee Type : RegularPercentage of Travel Required : Up to 10%Type of Travel : Continental US*

CACI is looking for a Cyber Security Lead to oversee a team of Cyber Security professionals supporting our customer, U.S.

Strategic Command (USSTRATCOM) in Omaha, Nebraska. This position is contingent upon award of the United States Strategic Command Information Technology and Logistics Support (SCITLS) contract.

What You’ll Get to Do

The Cyber Security Lead provides the following during the execution of this Task Order : Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.

Work collaboratively with other cybersecurity teams and business units. Drive the implementation of emerging threat intelligence (IOCs, updated rules, etc.

to identify affected systems and the scope of the attack. Implement standards and procedures to ensure alerts are addressed with relevancy, accuracy and in a timely manner.

Define protocols and maturing of 'playbooks' for operational response to cyber threats. Operate autonomously to further investigate and escalate in accordance with policies, procedures, and defined processes.

Provide teaching / mentoring to SOC I, II & III Analysts. Lead SOC analysts during incident response actions, advise and coordinate with leadership during active incidents.

Identify, evaluate, develop and report SOC related metrics via dashboard and / or reports. Manage shift schedules and lead SOC personnel.

Develop, lead and present relevant Cybersecurity tabletop exercises to SOC staff and relevant stakeholder groups for the purposes of identifying process improvement opportunities.

You’ll Bring These Qualifications

Possess a Top Secret (TS) clearance with eligibility for Sensitive Compartmented Information (SCI) at time of proposal submission.

A Bachelor’s Degree in an Computer Science, Cyber Security, or other related field of study.

A minimum of 10 years of experience with Security Operations / Defensive Cyber Operations, with a strong emphasis on cyber security operations.

A minimum of 10 years of progressive experience with cyber security incident event management (SIEM) and related processes & technologies, including

Expertise in cybersecurity products, network, and endpoint security

Proficiency in SIEM and event aggregation tools (QRadar, Splunk, ETC)

Experience with SOAR platforms and capabilities

Knowledge of Federal and DoD cybersecurity guidelines

Strong analytical skills and the ability to work under pressure.

Meets the certification requirements in alignment with DoDM 8140.3

Must possess at least one of the following : Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or related certifications.

These Qualifications are Desired

Possess one or more of the following certifications : SANS, Certified Ethical Hacker (CEH), Penetration Testing

Intel Security Certified Product Specialist ePO, DLPe, ESN

What We Can Offer You :

We’ve been named a Best Place to Work by the Washington Post.

Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.

We offer competitive benefits and learning and development opportunities.

We are mission-oriented and ever vigilant in aligning our solutions with the nations highest priorities.

For over 60 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.